perf_nt.dll

  • File Path: C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\legacy\perf_nt.dll
  • Description: Performance Analyzer AddIn: NT

Hashes

Type Hash
MD5 239968820EA86E6C16355699F6C557B9
SHA1 2BCA69ECC27AE1BC01F728EA3B2A7AA53BF78A43
SHA256 465CBEA7803DBDAB28E14602347B80B4531659F52AC91548337EC28E750CE25B
SHA384 9F89F50C4A6D76AC82FF68C6FB7403EFFE06A7754EC8016E7D2EDB92567839321918AB4A9EE55B4DB71F9B3344EBDA3F
SHA512 4098EF3CCE265155B4421DAD529D79039769A284D2273F5EE054AAC533E2DFC08760CD832FF3026264C743A5B20DA3AE0146D9B8FAAC33D73CD17C31B366AB93
SSDEEP 24576:f3Hv37zSBwE+w4IHG8mwgbPvdlb960hXX3vhHimBkg9:f3Hv37GBw6LHG89g5lE0hXX3vhHi
IMP BB7D93D1E54067E58371696DFCC745B4
PESHA1 5F64BCED381EDFF6D5EEB5E222C340A14480D174
PE256 4AFC927FBC4C738AD3C2F38C027983BF9D69B778F8EC52888C17A02A47052C04

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: perf_nt.dll
  • Product Name: Microsoft Windows Performance Analyzer
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: 2019 Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/465cbea7803dbdab28e14602347b80b4531659f52ac91548337ec28e750ce25b/detection

MIT License. Copyright (c) 2020-2021 Strontic.