pid.dll

  • File Path: C:\Windows\SysWOW64\pid.dll
  • Description: Microsoft PID

Hashes

Type Hash
MD5 2F836CC39A22CCB77EDAF9D4AB915E1E
SHA1 C54DB0E235691D8135FE437808F39F71530A756E
SHA256 88807FDCC2F39BDC79CB6DE7148AF11865B7A07C2A9DD95BE7E144AAC3A05BEE
SHA384 72FF7C8C5A8CD5FD666C7FD0AD7FAEDFE33F06322435E7D380E755F4F09ED6BF9911990C165990A915D22699210BFD31
SHA512 E1D75839C37734F79565CE0D50C2CF78B5221DE3D144109C3F40D5D81AA696AFBF9836D0DE36EABB9885A17BEBC114B2C4776D03C0C7E4711EDCE433BDF29BBB
SSDEEP 768:ASBOoRepbti2+68hKCogXjoAnDLjEha98:uJpx+ZcCHjXLSl
IMP 69A6DB979B7C14F7CEE136A89E244032
PESHA1 A55A63F654BD5990D71BA07C5D485F109F0C9717
PE256 651EE3238EEB9DCBDC9BE6B1460A0FBFBCAB65DDCC2076CA711730F9A53A673F

DLL Exports:

Function Name Ordinal Type
PID_GetFFEffectSettingsFromMemory 3 Exported Function
PID_WriteFFEffectSettingsToMemory 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PID
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/88807fdcc2f39bdc79cb6de7148af11865b7a07c2a9dd95be7e144aac3a05bee/detection/

MIT License. Copyright (c) 2020-2021 Strontic.