pla.dll
Performance Logs & Alerts by Microsoft
Version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
MD5: | 6e84bff58f7643499277f29dfa2f8c8d |
SHA1: | 43b086ca77f1fbb4468b74c2f620631f9800f0f2 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
pla.dll executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is installed on Windows 8 and is compiled as a 64 bit program.
Details
File name: | pla.dll |
Publisher: | Microsoft Corporation |
Product name: | Performance Logs & Alerts |
Description: | Microsoft® Windows® Operating System |
Typical file path: | C:\Windows\System32\pla.dll |
Original name: | PLA.DLL.MUI |
File version: | 6.2.9200.16384 (win8_rtm.120725-1247) |
Product version: | 6.2.9200.16384 |
Size: | 1.32 MB (1,379,840 bytes) |
Digital DNA |
Entropy: | 6.102473 |
File packed: | No |
Code language: | Microsoft Visual C# / Basic .NET |
.NET CLR: | Yes |
.NET NGENed: | No |
More details
Behaviors
Scheduled tasks
- The job 'RAM - Padrao' runs in the path '\Microsoft\Windows\PLA\RAM - Padrao'
- The task 'New Data Collector Set' runs in the path '\Microsoft\Windows\PLA\New Data Collector Set'
- The task 'LSC Memory' runs in the path '\Microsoft\Windows\PLA\LSC Memory'
- The job 'System Overview' runs in the path '\Microsoft\Windows\PLA\System Overview'
- The job 'ConvertLogEntries' in the path '\Microsoft\Windows\PLA\System\ConvertLogEntries'
- Entry path '\Microsoft\Windows\PLA\System Overview'
- Entry path '\Microsoft\Windows\PLA\Server Manager Performance Monitor'
- Entry path '\Microsoft\Windows\PLA\KCTR$1179'
- Entry path '\Microsoft\Windows\PLA\New Data Collector Set'
- Entry path '\Microsoft\Windows\PLA\System\ConvertLogEntries'
Hosted services
Runs as a shared service under the Windows svcHost
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
- Shared name is 'pla'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
CPU |
Total CPU: | 0.00097992% | |
Kernel CPU: | 0.00052221% | |
User CPU: | 0.00045770% | |
Kernel CPU time: | 141 ms/min | |
CPU cycles: | 25,468/sec | |
Memory |
Private memory: | 5.02 MB | |
Private (maximum): | 9.63 MB | |
Private (minimum): | 9.59 MB | |
Non-paged memory: | 5.02 MB | |
Virtual memory: | 68.15 MB | |
Virtual memory (peak): | 78.64 MB | |
Working set: | 9.63 MB | |
Working set (peak): | 9.63 MB | |
Page faults: | 10,572/min | |
I/O |
I/O read transfer: | 1.35 KB/sec | |
I/O read operations: | 1/sec | |
I/O other transfer: | 2 Bytes/sec | |
I/O other operations: | 3/sec | |
Resource allocations |
Threads: | 4 | |
Handles: | 198 | |
Process properties
Integrety level: | System |
Platform: | 64-bit |
Command lines: |
- C:\Windows\System32\rundll32.exe C:\Windows\System32\pla.dll,plahost "lsc memory" "0x1970_0x284_0x4b1342da16"
- C:\Windows\System32\rundll32.exe C:\Windows\System32\pla.dll,plahost "lsc memory" "0x1ce8_0x1bd4_0x2b7bfca5ce"
|
Owner: | SYSTEM |
Parent process: | services.exe (by Microsoft) |
Threads
Distribution by Windows OS
OS version | distribution |
Windows Vista Home Premium |
52.38% |
|
Windows Vista Ultimate |
11.11% |
|
Windows 7 Professional |
7.94% |
|
Windows Vista Home Basic |
7.94% |
|
Windows 8 Single Language |
4.76% |
|
Windows 8 |
4.76% |
|
Windows 8.1 |
4.76% |
|
Windows Vista Business |
3.17% |
|
Windows Server 2008 Standard |
1.59% |
|
Windows Server 2012 Standard Evaluation |
1.59% |
|
Distribution by country
United States installs about 58.33% of Performance Logs & Alerts.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Lenovo |
32.26% |
|
Dell |
22.58% |
|
Hewlett-Packard |
16.13% |
|
Sony |
12.90% |
|
ASUS |
9.68% |
|
Intel |
3.23% |
|
American Megatrends |
1.61% |
|
Samsung |
1.61% |
|