Benign windows download unavailable

apc.h

NonPagedPool kernel memory flag
SHA-256e31b26a909564f1fe1f5543325e8120a42d1348fa7246da240aee0bd63928f82
MaleculeH(Mg)

Evidence

NTAPI calling-convention macro lines 235–238
235typedef _Function_class_(PS_APC_ROUTINE)
236VOID NTAPI PS_APC_ROUTINE(_In_opt_ PVOID ApcArgument1, _In_opt_ PVOID ApcArgument2, _In_opt_ PVOID ApcArgument3);
237typedef PS_APC_ROUTINE* PPS_APC_ROUTINE;
238typedef struct _CLIENT_ID {
NonPagedPool kernel memory flag lines 470–474
470 SIZE_T QuotaPeakPagedPoolUsage; // The peak quota charged to the process for pool usage, in bytes.
471 SIZE_T QuotaPagedPoolUsage; // The quota charged to the process for paged pool usage, in bytes.
472 SIZE_T QuotaPeakNonPagedPoolUsage; // The peak quota charged to the process for nonpaged pool usage, in bytes.
473 SIZE_T QuotaNonPagedPoolUsage; // The current quota charged to the process for nonpaged pool usage.
474 SIZE_T PagefileUsage; // The total number of bytes of page file storage in use by the process.

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.