whealogr.dll

  • File Path: C:\Windows\system32\whealogr.dll
  • Description: WHEA Troubleshooter

Hashes

Type Hash
MD5 489D733B96B0FBAFC621B74A055F9430
SHA1 E2E7ABEB615124A1D7CCC24B41AC4FE6069B5986
SHA256 88DA52CA0AAF4E85003A55B8731B3878501B994CD262DAB6F10406648ABC5155
SHA384 C8C0A060204420EE75BB0B4894873B0F4AC000B1D826C977FA434BD8D11339E1260D00BDCB48095DFB868099781B07DB
SHA512 29B6F7026AD71A39F4C80F766803E03DEB7343DC12B88673310E3B22BC9DC28C7C77E8B07EBB526E2EC5B68CC0DE355BC2EB2702A44DAC8929CFDC1A45A082EA
SSDEEP 1536:Wuk+FOYDsdNWoj50vwsfLwrSoPSCbtPMj:Wuk+FOysdNW9TUSmnC
IMP 9C457BC8C4968E6E4CD050A10F01D323
PESHA1 FB6F6BF31C4FE7F3BC79AD3352B92833BBE1B1DF
PE256 32522DC1D95125D4D4AD09F8F6F968DFA0917F9737368380E247844D614114D3

DLL Exports:

Function Name Ordinal Type
WdiHandleInstance 3 Exported Function
WdiGetDiagnosticModuleInterfaceVersion 2 Exported Function
WdiDiagnosticModuleMain 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: whealogr.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/88da52ca0aaf4e85003a55b8731b3878501b994cd262dab6f10406648abc5155/detection/

MIT License. Copyright (c) 2020-2021 Strontic.