ttdplm.dll

  • File Path: C:\Windows\SysWOW64\ttdplm.dll
  • Description: Time Travel Debugger PLM APIs

Hashes

Type Hash
MD5 28CF11C2B8313409A4FCD07B5BC5C80C
SHA1 AB5818135464CF536591B6576E8F3A4CC63FEACD
SHA256 EF309BE1210C5AE5C84B917C389131C9AF5A1C38FAD66A11C1BA4E970BE27B43
SHA384 5242929D323D550DC217E677E83E07C3B5A2B44FFF35EA05797859D3CAB148D21EF96A22E7290A403BA0615F5318163C
SHA512 759677A643234C252AD1C0729BF5568C962174E3B92BE7C1892001AB0C1AFF4EDDC59DA0F1DF9E1E36A8D186425389D20A414D72D3B286A1596BC10EE93BF658
SSDEEP 768://OcG2j3oVtD7QyDlwoRKNJl5Fzn6lh38awNBW1HPTRfaCI1PCg:HOd2jk7QyD6Jp2lh38awNBW1HPwPCg
IMP AE751A8D1164C21DD945C2FDB41A14E5
PESHA1 A55DCA2FC0751B035C38CD92B23B175E2C69B3F4
PE256 5FE899A76EAE2B61470BA5ECF0B3A65DE3160DC6DDAF16D18EC0034A43580F78

DLL Exports:

Function Name Ordinal Type
GetPackageFromPid 4 Exported Function
SetPermisionsForFolder 5 Exported Function
GetMaxPackageNameLength 3 Exported Function
CreateModernAppToDelete 1 Exported Function
CreateModernAppToTrace 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TTDPlm.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/ef309be1210c5ae5c84b917c389131c9af5a1c38fad66a11c1ba4e970be27b43/detection/

MIT License. Copyright (c) 2020-2021 Strontic.