home

PDH.DLL

Microsoft Windows 2000 Operating System

Prism Microsystems, Inc.

Publisher:
Microsoft Corporation  (signed by Prism Microsystems, Inc.)

Product:
Microsoft(R) Windows (R) 2000 Operating System

Description:
Windows Performance Data Helper DLL

Version:
5.00.2174.1

MD5:
ab3b977a1440f4e382b33782f64b21ad

SHA-1:
b4e76a24d4caef23a0d2a8d0b7508a94aa760d30

SHA-256:
85d338f4b572990d40949864ff6370b1d241b78fce190bd20c40e09f2de87078

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 4:00:16 AM UTC  (today)

File size:
145.3 KB (148,760 bytes)

Product version:
5.00.2174.1

Copyright:
Copyright (C) Microsoft Corp. 1981-1999

Original file name:
PDH.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\prism microsystems\eventtracker\agent\aitemp\pdh.dll

Digital Signature
Signed by:
Prism Microsystems, Inc.

Authority:
The USERTRUST Network

Valid from:
7/23/2007 3:00:00 AM

Valid to:
7/23/2009 2:59:59 AM

Subject:
CN="Prism Microsystems, Inc.", O="Prism Microsystems, Inc.", STREET=6990 Columbia Gateway Drive, STREET=Suite 250, L=Columbia, S=MD, PostalCode=21046, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E33789320B89A2BEA6F2094F9A9CB063

File PE Metadata
Compilation timestamp:
11/30/1999 11:34:00 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
5.12

CTPH (ssdeep):
3072:D+K1ousgvX18kLAZN/Ib3e2ls3mz+MfsDURTIP6KJD1gQ563nI6RK:H18k2m37YDUOyw1ghq

Entry address:
0x10BA3

Entry point:
55, 8B, EC, 81, EC, 14, 01, 00, 00, 8B, 45, 0C, 53, 56, 57, 33, F6, 6A, 01, 3B, C6, 5F, 0F, 84, D8, 00, 00, 00, 3B, C7, 0F, 85, 22, 01, 00, 00, 8B, 5D, 08, 6A, 45, 59, 33, C0, 8D, BD, EC, FE, FF, FF, 89, 35, 5C, 07, 30, 69, F3, AB, 8D, 85, EC, FE, FF, FF, 89, 75, 0C, 50, 89, 1D, 40, 05, 30, 69, C7, 85, EC, FE, FF, FF, 14, 01, 00, 00, FF, 15, F8, 10, 2E, 69, 8B, F8, 3B, FE, 0F, 84, E2, 00, 00, 00, 83, BD, FC, FE, FF, FF, 02, 75, 09, 83, BD, F0, FE, FF, FF, 04, 73, 02, 33, FF, 3B, FE, 0F, 84, C6, 00, 00, 00...
 
[+]

Entropy:
6.5046

Developed / compiled with:
Microsoft Visual C++

Code size:
121.5 KB (124,416 bytes)

Scan PDH.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.