WmiPerfInst.dll

  • File Path: C:\Windows\system32\wbem\WmiPerfInst.dll
  • Description: WbemPerf V2 Instance Provider

Hashes

Type Hash
MD5 566C8C9AC0456CCC45860AA9A1AD5485
SHA1 BC3B2C25CA37A34BB5A9C4D6F7AB4D2E2F36DEAA
SHA256 85FB5E99300F90DF49610415548D345EE1E0494F0B744F538BDB43C1567CAB4B
SHA384 472E45AA0567C19625B67B61CEF40FD424677483453DE870A2DA324094DEB9DC97233D3776C0268E3B29C69A9AE4FB43
SHA512 5600E252C95A83B79AE48F39EDE7DBA6F552C2237DCC6CA075B1B3033920E3E377930919B1526B06512FCA271719551B2A919DAD83CDDE3C4C90A9A4EDF65435
SSDEEP 1536:BMertuNueS64ZVXp4UU7PSDS+vIvlG3YLxri:BMquIe3TSu+vIvw3s+
IMP DF526E088D155F291C24EEE087F48A3C
PESHA1 21A07DFF2A6F4409A9B8964EEE9FAFBE8AD902E4
PE256 BE7D2EDD51520DA70EFC6A8A580AA9AD9CDD7ED281DA61DF898A053DA8390527

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WbemPerfInst.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/85fb5e99300f90df49610415548d345ee1e0494f0b744f538bdb43c1567cab4b/detection/

MIT License. Copyright (c) 2020 Strontic.