» WinLogEventHandler.dll
Overview
Analysis
File Details
Programs (1)

WinLogEventHandler.dll

Intel Management and Security Application Local Management Service

Intel Corporation

This is installed with Intel(R) Management Engine Components.

File name:

WinLogEventHandler.dll

Publisher:

Intel Corporation (signed and verified)

Product:

Intel(R) Management and Security Application Local Management Service

Description:

Win Log Event Handler

Version:

11.0.0.1149

MD5:

aad692bfb62113768235c333241c851a

SHA-1:

995504577bd986ebaaa7db9e620dba77efd6f91c

SHA-256:

0404c64639b3cd0b05cc3729a8d02331d15b2b0d979e122d8c17bbd9cc0c97a4

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/16/2024 5:16:07 AM UTC (today)

File size:

43.8 KB (44,832 bytes)

Product version:

11.0.0.1149

Original file name:

WinLogEventHandler.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\intel\intel(r) management engine components\lms\winlogeventhandler.dll

Digital Signature

Signed by:

Intel Corporation

Authority:

Intel Corporation

Valid from:

3/18/2014 8:17:07 AM

Valid to:

3/2/2017 8:17:07 AM

Subject:

CN=Intel Corporation - Embedded Subsystems and IP Blocks Group, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Issuer:

CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Serial number:

330000B10096925C294E64426800020000B100

File PE Metadata

Compilation timestamp:

6/17/2015 7:05:18 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

768:L9XxNp1RnvvDiWoGXSSoauR80aD5xOZKdXtnt++mfdTxwL6OLk:LT1oBSo/83DLOZ2tbmck

Entry address:

0x4090

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 98, 03, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 10, 93, 00, 10, 89, 0D, 0C, 93, 00, 10, 89, 15, 08, 93, 00, 10, 89, 1D, 04, 93, 00, 10, 89, 35, 00, 93, 00, 10, 89, 3D, FC, 92, 00, 10, 66, 8C, 15, 28, 93, 00, 10, 66, 8C, 0D, 1C, 93, 00, 10, 66, 8C, 1D, F8, 92, 00, 10, 66, 8C, 05, F4, 92, 00, 10, 66, 8C, 25, F0, 92, 00, 10, 66, 8C, 2D, EC, 92, 00, 10, 9C, 8F, 05, 20, 93... 
[+]

Code size:

17 KB (17,408 bytes)

The file WinLogEventHandler.dll has been discovered within the following program.

Intel(R) Management Engine Components by Intel Corporation

This program provides the Intel Management Engine Components Driver for supported notebooks with supported operating systems. The Intel management Components monitor the installed Intel hardware, such as chip sets, storage, and other components.

downloadcenter.intel.com/Detail_Desc.aspx?lang=eng&DwnldID=20402

10% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.