perf_nt.dll
- File Path:
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\legacy\perf_nt.dll
- Description: Performance Analyzer AddIn: NT
Hashes
Type |
Hash |
MD5 |
239968820EA86E6C16355699F6C557B9 |
SHA1 |
2BCA69ECC27AE1BC01F728EA3B2A7AA53BF78A43 |
SHA256 |
465CBEA7803DBDAB28E14602347B80B4531659F52AC91548337EC28E750CE25B |
SHA384 |
9F89F50C4A6D76AC82FF68C6FB7403EFFE06A7754EC8016E7D2EDB92567839321918AB4A9EE55B4DB71F9B3344EBDA3F |
SHA512 |
4098EF3CCE265155B4421DAD529D79039769A284D2273F5EE054AAC533E2DFC08760CD832FF3026264C743A5B20DA3AE0146D9B8FAAC33D73CD17C31B366AB93 |
SSDEEP |
24576:f3Hv37zSBwE+w4IHG8mwgbPvdlb960hXX3vhHimBkg9:f3Hv37GBw6LHG89g5lE0hXX3vhHi |
IMP |
BB7D93D1E54067E58371696DFCC745B4 |
PESHA1 |
5F64BCED381EDFF6D5EEB5E222C340A14480D174 |
PE256 |
4AFC927FBC4C738AD3C2F38C027983BF9D69B778F8EC52888C17A02A47052C04 |
DLL Exports:
Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
33000002CF6D2CC57CAA65A6D80000000002CF
- Thumbprint:
1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
- Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: perf_nt.dll
- Product Name: Microsoft Windows Performance Analyzer
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: 2019 Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/465cbea7803dbdab28e14602347b80b4531659f52ac91548337ec28e750ce25b/detection
MIT License. Copyright (c) 2020-2021 Strontic.