» DBGHELP.DLL
Overview
Analysis
File Details
Programs (1)

DBGHELP.DLL

Debugging Tools for Windows

Microsoft Corporation

This is installed with Debugging Tools for Windows (x64).

File name:

DBGHELP.DLL

Publisher:

Microsoft Corporation (signed and verified)

Product:

Debugging Tools for Windows(R)

Description:

Windows Image Helper

Version:

6.12.0001.591 (debuggers(dbg).091016-1729)

MD5:

c8498e9b9b9df679b24baa9355cf41c6

SHA-1:

4e50412b8a3fb34e3c4910147d1bd6b9eb8a88fa

SHA-256:

d9a6d13245679638a6f378c95f9f4e8acf44988168aa2249f9300f1e0def9df7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/25/2024 6:30:41 PM UTC (today)

File size:

1.5 MB (1,555,712 bytes)

Product version:

6.12.0001.591

Original file name:

DBGHELP.DLL

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\debugging tools for windows (x64)\srcsrv\dbghelp.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

7/13/2009 4:00:18 PM

Valid to:

10/13/2010 4:10:18 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6105F71E000000000032

File PE Metadata

Compilation timestamp:

10/16/2009 5:34:18 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

24576:SlIAc12qi7ky3gQlkVDgK/P4OaKCymcb8fv87DIIvVmSqD:ee12qi7kyw11Gz9bkM

Entry address:

0xB0720

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, E7, 12, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, CB, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 89, D9, 0A, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, 54, 13, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, 2C, 0E, F5, FF, CC, CC, CC, CC... 
[+]

Entropy:

5.9957

Code size:

1.4 MB (1,427,968 bytes)

The file DBGHELP.DLL has been discovered within the following program.

Debugging Tools for Windows (x64) by Microsoft Corporation

Use Debugging Tools for Windows to debug drivers, applications, and services on Windows systems. Debugging Tools for Windows includes a core debugging engine and several tools that provide interfaces to the debugging engine.

www.microsoft.com

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.