This repository is the Windows Symbol Table storage for Volatility 3.
$ git clone https://github.com/JPCERTCC/Windows-Symbol-Tables.git
$ cp -R symbols/windows volatility3/volatility3/symbols
How to Use Volatility 3 Offline: https://blogs.jpcert.or.jp/en/2021/09/volatility3_offline.html
| ntoskrnl version | GUID-AGE | OS |
|---|---|---|
| 10.0.22000.318 | 32C1A669D5FFEFD41091F636CFDB6E991 | Win11 |
| 10.0.22000.348 | 27072505E9A6A497FAF0D5BA8D06EC061 | Win11 |
| 10.0.22000.376 | F4ED78B31C1925908274B0A979AA418A1 | Win11 |
| 10.0.22000.434 | 54D7D2CB60778ADE7A575354D318B1EC1 | Win11 |
| 10.0.22000.493 | 90279976B1039EAE5F0FA8A241209F5F1 | Win11 |
| 10.0.22000.556 | DCC3FFCBE9C59B5668C1DE2BD6CBC6DF1 | Win11 |
| 10.0.22000.613 | 792F62F3883D5FCBA437801F552028B51 | Win11 |
| 10.0.22000.675 | 1D9CD02E95982257EA62A9E0F0E00AFD1 | Win11 |
| 10.0.22000.739 | B2F2E1A8C72EB19985BF9A2BE19605D41 | Win11 |
| 10.0.22000.795 | 8E3373D6124E747F0E72EF8E02E676B31 | Win11 |
| 10.0.17763.379 | 8b11040a5928757b11390ac78f6b69251 | Win10 |
| 10.0.17763.437 | 8cfb49428dc86a330ce257778e0c2f931 | Win10 |
| 10.0.18326.535 | 616a94e33a4827b451b0e19c14c037921 | Win10 |
| 10.0.18326.778 | be3e0ff92c7a93433d4a950a037ef6561 | Win10 |
| 10.0.18362.295 | 11bc9a513f1140ca359ecdf50f0122c11 | Win10 |
| 10.0.18362.30 | 35a038b1f6e2e8caf642111e6ec66f571 | Win10 |
| 10.0.18362.356 | ce7ffb00c20b87500211456b3e905c471 | Win10 |
| 10.0.18362.418 | e0093f3aef15d58168b753c9488a40431 | Win10 |
| 10.0.18362.476 | 90f5e1c8bbe1fe1fb8a714305ee06f361 | Win10 |
| 10.0.18362.592 | f3a4f64b6f639a058ad6f33155aca4f61 | Win10 |
| 10.0.18362.657 | 84924f606dcfa4bef5c0d97c2668cf181 | Win10 |
| 10.0.18362.720 | 2b5d086a9591c3a54729282e8f43bd821 | Win10 |
| 10.0.18362.836 | dca4ad4beeb4746d48f84c0125019e431 | Win10 |
| 10.0.19041.1052 | fc57f1c841c2c3f793d57ac134dc0efa1 | Win10 |
| 10.0.19041.1110 | f526dbb121425697cbbf4fb22502519f1 | Win10 |
| 10.0.19041.1165 | 47114209a62f3b9930f6b8998dfd4a991 | Win10 |
| 10.0.19041.1237 | 1b4a6f5e0766c552c90710c8acc0295c1 | Win10 |
| 10.0.19041.1288 | ca8e2f01b822ede6357898bfbf8629971 | Win10 |
| 10.0.19041.1348 | 1f9bb45b28b806e4d18925c06e924b8c1 | Win10 |
| 10.0.19041.1415 | 3177d31000ba7590ded335936c93e3741 | Win10 |
| 10.0.19041.1466 | 733830ecafa1a3073ffa9cc3a38fe93c1 | Win10 |
| 10.0.19041.1526 | 9C00B19DBDE003DBFE4AB4216993C8431 | Win10 |
| 10.0.19041.1586 | 118018959D8D7CA5AAB45B75AED5A9761 | Win10 |
| 10.0.19041.1645 | 725DA593BDE0B421BA4B8CA28AA67A421 | Win10 |
| 10.0.19041.1706 | 84A84F4D2218BC053913B1204942618D1 | Win10 |
| 10.0.19041.1766 | A7DD074C948F81ECF4D65E3609DF48391 | Win10 |
| 10.0.19041.1826 | 5D6312DA6921E3A4E7F938B88330B0771 | Win10 |
| 10.0.19041.329 | bbed7c2955fbe4522aaa23f4b8677ad91 | Win10 |
| 10.0.19041.388 | 110a2d89ed7a438feffc84f9cfdd6c001 | Win10 |
| 10.0.19041.450 | 1c9875f76c8f0fbf3eb9a9d7c1c274061 | Win10 |
| 10.0.19041.508 | 641f55c592201dcc4f59facc72ea54da1 | Win10 |
| 10.0.19041.572 | b16053724b46515388fdea9d0470d02e1 | Win10 |
| 10.0.19041.630 | 15b12c74f0e177581b6b27dd4c5022c21 | Win10 |
| 10.0.19041.685 | 4ef9a5375f61fe84b7eaef54bf025c0e1 | Win10 |
| 10.0.19041.746 | 3d4400784115718818efc898413f36c41 | Win10 |
| 10.0.19041.804 | 5278aff86c341677d7d7835c85b7b8441 | Win10 |
| 10.0.19041.867 | 3fcc539ff307dd2d9c509206d352b9aa1 | Win10 |
| 10.0.19041.928 | 769c521e4833ecf72e21f02bf33691a51 | Win10 |
| 10.0.19041.985 | 992a9a48f30ec2c58b01a5934dce2d9c1 | Win10 |
| 6.1.7601.24540 | 339e74133576439cbcdf7e0229da37731 | Win7 |
| 6.3.9600.19913 | 22597d0b40394e23936f6a24c6c52d5b1 | Win8.1 |
| 6.3.9600.19939 | 287e489f93aa4c6d94b9cd1469b7f9de1 | Win8.1 |
| 6.3.9600.19962 | 06a508f37b81478e855a3542e272c0841 | Win8.1 |
| 6.3.9600.19994 | 1e8593423c574a72be87ea4966e1377b1 | Win8.1 |
| 6.3.9600.20012 | bf4b4160c2cb414e9c4516da1e7b66091 | Win8.1 |
| 6.3.9600.20040 | c78ab9dbffed445096b4dcf7fdd6e5af1 | Win8.1 |
| 6.3.9600.20065 | 4dc173cc51ec446e895dc545db61083e1 | Win8.1 |
| 6.3.9600.20090 | dfa4f6552dd34e03b16763d22438d8fa1 | Win8.1 |
| 6.3.9600.20111 | b02b752659a9454694e2378cb3c25e611 | Win8.1 |
| 6.3.9600.20144 | 57850e65d6e649a8b2a137aa12ed64651 | Win8.1 |
| 6.3.9600.20173 | b3e18239ff83427fbbca75184bde83881 | Win8.1 |
| 6.3.9600.20201 | f25327cb8b2f4e469230ebb60a8f91011 | Win8.1 |
| 6.3.9600.20237 | 7c398e976bf945ad812b204dafbc1a031 | Win8.1 |
| 6.3.9600.20173 | b3e18239ff83427fbbca75184bde83881 | windows-2012 |
| 6.3.9600.20201 | f25327cb8b2f4e469230ebb60a8f91011 | windows-2012 |
| 6.3.9600.20237 | 7c398e976bf945ad812b204dafbc1a031 | windows-2012 |
| 6.3.9600.20269 | 0E352AF38FB64A36AA56E6CC5CAD6C1A1 | windows-2012 |
| 6.3.9600.20302 | C8539FFDFDA646A794016F13DD5EC9411 | windows-2012 |
| 6.3.9600.20334 | 610455A6355B4DEFB6BAA86D9F7967EE1 | windows-2012 |
| 6.3.9600.20369 | BCA80A7A82B841C8BBF396E52DCA91781 | windows-2012 |
| 6.3.9600.20396 | 89307450A75C4085AA1A35D3A3C89D511 | windows-2012 |
| 6.3.9600.20475 | E94865C581EC4D45820E8D5CA952D15D1 | windows-2012 |
| 10.0.14393.4583 | 517e128f7b7c4ea79491de6b9b9ce1901 | windows-2016 |
| 10.0.14393.4651 | e0572d333a6446129e52cbe9ae90897f1 | windows-2016 |
| 10.0.14393.4704 | a15830fe2e9141ba85535ab16623cf6f1 | windows-2016 |
| 10.0.14393.4770 | 03a098bc85d047028437d88e4c8bbc6b1 | windows-2016 |
| 10.0.14393.4825 | d23e3da5c95b4433b1d6f1b4c4e2fd941 | windows-2016 |
| 10.0.14393.4886 | febda73b114e41c2b4c547da347c05431 | windows-2016 |
| 10.0.14393.4889 | 369f16d4758a4aa6b9c890b189ab79ec1 | windows-2016 |
| 10.0.14393.4946 | 62d7200678ed4aa5b4ff890fe7e8aba51 | windows-2016 |
| 10.0.14393.5006 | 2E6DEB6CFD444100AC0E803337A56E8E1 | windows-2016 |
| 10.0.14393.5066 | A4DFE6779CD04574964851BE4A8912AC1 | windows-2016 |
| 10.0.14393.5125 | D9F2858D146F4F3FB9B883996100A0B31 | windows-2016 |
| 10.0.14393.5192 | 7B38CB85F4404CBEA34A0C5A7D14EE1F1 | windows-2016 |
| 10.0.14393.5246 | EFD6056BFF6544449564192E973D4B2E1 | windows-2016 |
| 10.0.17763.2114 | a1e1c9a90091da9805d0eba0470bec851 | windows-2019 |
| 10.0.17763.2183 | 516fdc079c4e093d75f266192f75a52b1 | windows-2019 |
| 10.0.17763.2237 | da773cf3acf6d826aed8ff5ae17e61591 | windows-2019 |
| 10.0.17763.2300 | 8d8cf2e14d2d1b21cd88604ac6fde56d1 | windows-2019 |
| 10.0.17763.2366 | 581f3febf2baba4d2ff64fd74f694c371 | windows-2019 |
| 10.0.17763.2452 | 76133b7d5e53e8ef3783a686651425831 | windows-2019 |
| 10.0.17763.2458 | ddb20debcb363de9556d3feca36dabfa1 | windows-2019 |
| 10.0.17763.2565 | 4d1166a90bfa1115442f0c6ec2dcd9041 | windows-2019 |
| 10.0.17763.2686 | 88b8a4b5cfba32b6f31e476e95096c281 | windows-2019 |
| 10.0.17763.2803 | 8b29d57f94eab6148b4d185e2e35d3511 | windows-2019 |
| 10.0.17763.2928 | e7f5fabbed95709a1f9bc3ed165530d81 | windows-2019 |
| 10.0.20348.288 | c2eadb24a615e9472ce47c8add31f1301 | windows-2022 |
| 10.0.20348.350 | f22d5096197f1d22c8f5955c03cb1ced1 | windows-2022 |
| 10.0.20348.405 | ef7fb2523ad441db2bdac4190298ced51 | windows-2022 |
| 10.0.20348.469 | ede5503233de2c6218623e7317a061da1 | windows-2022 |
| 10.0.20348.473 | d90d3820ecf92581c66cdae20635da741 | windows-2022 |
| 10.0.20348.524 | fe83cfaada3cd7f0a52bb3fe58b6236b1 | windows-2022 |
| 10.0.20348.587 | d801a9afc0fb7761380800f708633dea1 | windows-2022 |
| 10.0.20348.643 | cb104728000eedde14f7e8a097a4c8c31 | windows-2022 |
| 10.0.20348.707 | 21e85d1745416fb7acf01cf90a132aab1 | windows-2022 |
| 10.0.20348.768 | aad3f3b157f37fe7eb6cfdbd65f566f81 | windows-2022 |
| 10.0.17763.3046 | cab8d006363809b6d6267bb6e5589f881 | windows-2019 |
| 10.0.17763.3165 | 330eb97bff4973e25b55a8cb0db099de1 | windows-2019 |
| 10.0.20348.825 | a211952831047280c099caeba1f59eda1 | windows-2022 |