Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.1222 7.69%
1.0.1222 10.26%
1.0.1222 28.21%
1.0.1222 12.82%
1.0.1222 12.82%
1.0.1222 7.69%
1.0.1222 15.38%
1.0.1222 2.56%
1.0.1222 2.56%
(Note, CyberLink publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenThreadToken, GetTokenInformation, OpenProcessToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, GetLengthSid, CopySid, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegEnumValueW, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegOpenKeyExW, StartServiceCtrlDispatcherW, ControlService, DeleteService, CreateServiceW, ChangeServiceConfig2W, RegDeleteValueW, RegSetValueExW, RegCloseKey, RegQueryValueExW, SetServiceStatus, RegisterServiceCtrlHandlerW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, OpenSCManagerW, OpenServiceW, CloseServiceHandle
iphlpapi.dll
SetIpTTL
kernel32.dll
OutputDebugStringW, GetCPInfo, SetStdHandle, EnterCriticalSection, LeaveCriticalSection, GetCurrentThread, GetCurrentProcess, CloseHandle, lstrcatW, lstrcpyW, LoadLibraryW, GetProcAddress, lstrcpynW, LoadLibraryExW, GetLastError, FindResourceW, LoadResource, SizeofResource, lstrlenA, MultiByteToWideChar, FreeLibrary, GetModuleHandleW, GetShortPathNameW, InterlockedIncrement, DeleteCriticalSection, InitializeCriticalSection, GetModuleFileNameW, OutputDebugStringA, lstrlenW, GetCommandLineW, lstrcmpiW, GetCurrentThreadId, InterlockedDecrement, GetOEMCP, GetACP, GetStringTypeW, GetStringTypeA, LCMapStringW, FlushFileBuffers, LoadLibraryA, IsBadCodePtr, IsBadReadPtr, SetUnhandledExceptionFilter, SetFilePointer, WideCharToMultiByte, WriteFile, RtlUnwind, HeapFree, HeapAlloc, HeapReAlloc, GetModuleHandleA, GetStartupInfoW, GetVersion, ExitProcess, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, TerminateProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetEnvironmentStrings, GetCommandLineA, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, LCMapStringA
ole32.dll
CoCreateInstance, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree, CoInitializeSecurity, CoUninitialize, CoInitialize
user32.dll
DispatchMessageW, MessageBoxW, LoadStringW, GetMessageW, PostThreadMessageW, CharNextW

CLHNServiceForPowerDVD12.exe

CLHNServiceForPowerDVD12 Module by CyberLink (Signed)

Remove CLHNServiceForPowerDVD12.exe
Version:   1.0.1222
MD5:   2454cf8626b183d023d47feeb17285b5
SHA1:   c64b1f25e6d4c769209d5705c61437134d9fbfa8
SHA256:   b5acb124a20ef07dc9238eb912d7b32a5c2537c8a84284a0df2b144a261d7e5f

Overview

clhnserviceforpowerdvd12.exe runs as a service under the name CLHNServiceForPowerDVD12 with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:clhnserviceforpowerdvd12.exe
Publisher:CyberLink Corp.
Product name:CLHNServiceForPowerDVD12 Module
Typical file path:C:\Program Files\cyberlink\powerdvd12\kernel\dmp\clhnserver\clhnserviceforpowerdvd12.exe
File version:1.0.1222
Size:85.29 KB (87,336 bytes)
Certificate
Issued to:CyberLink
Authority (CA):VeriSign
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CLHNServiceForPowerDVD12'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00002163%
0.028634%
Kernel CPU:0.00001186%
0.013761%
User CPU:0.00000976%
0.014873%
Kernel CPU time:16 ms/min
100,923,805ms/min
CPU cycles:1,749/sec
17,470,203/sec
Memory
Private memory:1.23 MB
21.59 MB
Private (maximum):4.34 MB
Private (minimum):4.21 MB
Non-paged memory:1.23 MB
21.59 MB
Virtual memory:30.3 MB
140.96 MB
Virtual memory (peak):33.44 MB
169.69 MB
Working set:4.31 MB
18.61 MB
Working set (peak):4.34 MB
37.95 MB
Page faults:1,261/min
2,039/min
I/O
I/O read transfer:0 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:76
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\cyberlink\powerdvd12\kernel\dmp\clhnserver\clhnserviceforpowerdvd12.exe"
Owner:SYSTEM
Windows Service
Service name:CLHNServiceForPowerDVD12
Description:“CLHNServiceForPowerDVD12”
Type:Win32OwnProcess
Parent process:services.exe (by Microsoft)

ResourcesThreads

Averages
 
CLHNServiceForPowerDVD12.exe (main module)
Total CPU:0.00016206%
0.272967%
Kernel CPU:0.00008103%
0.107585%
User CPU:0.00008103%
0.165382%
CPU cycles:2,906/sec
5,741,424/sec
Memory:84 KB
1.16 MB
wow64.dll
Total CPU:0.00003500%
Kernel CPU:0.00003500%
User CPU:0.00000000%
CPU cycles:856/sec
Memory:252 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 41.03%
Windows 7 Home Premium 17.95%
Windows 7 Professional 10.26%
Windows 8 Enterprise 10.26%
Windows Vista Home Premium 7.69%
Microsoft Windows XP 5.13%
Windows 8 Pro 5.13%
Windows 8 2.56%

Distribution by countryDistribution by country

United States installs about 33.33% of CLHNServiceForPowerDVD12 Module.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 37.50%
Acer 20.83%
ASUS 16.67%
Dell 16.67%
GIGABYTE 8.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE