PSHED.DLL

  • File Path: C:\Windows\system32\PSHED.DLL
  • Description: Platform Specific Hardware Error Driver

Hashes

Type Hash
MD5 DC61643CD353AA826F2B8DF06422B266
SHA1 7EC8F511717A71F692A79A27E348C6654D0D6F40
SHA256 27858972C18AFCCD944453B72FEEEBA66B1587F2075087780AA4FC54202D8221
SHA384 8DEBE54174216AE604A7DB2C1881AF118AF937718BDC93A3C8EEDCD3890576653E7BDCC6825579BEF678E2F768D10227
SHA512 9220040F5F97DA34B68FD20E59081BEB410627EF8F4C3DC15CE0CDDA56EC523682A31FCBEE5F11A266EB81C1897A8825FD96440D98DA57A51EC7AD9C29CC1B1A
SSDEEP 1536:UcwAIzNHSyh6OQuOt9btte+sXKukPQ+psI0Ly2PwV5ugT:4NV3Q/4+sXKukPQ+psI0Ly24bpT
IMP 89347D290990998D3F6FB20FEC58B1D9
PESHA1 37B9D8BA88BDB2F2B1693A0CCEFCFA8C5875ADDC
PE256 A425409A4886699584E82933E5C89E1F3DC48163493EFA10786266D3A0DDD09A

DLL Exports:

Function Name Ordinal Type
PshedInjectError 20 Exported Function
PshedIsSystemWheaEnabled 21 Exported Function
PshedMarkHiberPhase 22 Exported Function
PshedInitProc 18 Exported Function
PshedInitAvailable 16 Exported Function
PshedInitGlobal 17 Exported Function
PshedInitialize 19 Exported Function
PshedReadErrorRecord 23 Exported Function
PshedSynchronizeExecution 28 Exported Function
PshedUnregisterPlugin 29 Exported Function
PshedWriteErrorRecord 30 Exported Function
PshedSetHalEnlightenments 27 Exported Function
PshedRegisterPlugin 24 Exported Function
PshedRetrieveErrorInfo 25 Exported Function
PshedSetErrorSourceInfo 26 Exported Function
PshedClearErrorRecord 5 Exported Function
PshedDisableErrorSource 6 Exported Function
PshedDoPfa 7 Exported Function
PshedBugCheckSystem 4 Exported Function
PshedAllocateMemory 1 Exported Function
PshedArePluginsPresent 2 Exported Function
PshedAttemptErrorRecovery 3 Exported Function
PshedEnableErrorSource 8 Exported Function
PshedGetErrorSourceInfo 13 Exported Function
PshedGetHalEnlightenments 14 Exported Function
PshedGetInjectionCapabilities 15 Exported Function
PshedGetBootErrorPacket 12 Exported Function
PshedFinalizeErrorRecord 9 Exported Function
PshedFreeMemory 10 Exported Function
PshedGetAllErrorSources 11 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: pshed.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/27858972c18afccd944453b72feeeba66b1587f2075087780aa4fc54202d8221/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\PSHED.DLL 63

MIT License. Copyright (c) 2020 Strontic.