perf_va.dll

• File Path: C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\perf_va.dll
• Description: XPerfCore AddIn: VirtualAlloc

Hashes

Type	Hash
MD5	401B4D87709EAC48F23D98CD24BA22E9
SHA1	9685165CAFBE3A80F613EB95327AFF5743DEA16D
SHA256	C32C6913EB126121AD7162992B5A413825677685F214829692CAB7F5A7FE4C8D
SHA384	2CB56272CE61CD1F49EBE90AA6F9BD68E77A3F20B407701F87F1C7A00AD731E58BA6113338A640E3948A813E3D4B33CC
SHA512	3AA4884B9D3A5DAEFB850D87CA663CDB4CCDA5C7ADE2EEB33EF5DD356209B2395961626FB847C647DED6001C3164292F6828DFF89F9311B682C7DB4A1556D98A
SSDEEP	3072:AbcwbYIWL8bv3lgLDvSkv8AT1RFpeKQyMDfrFGO+0h9A0la:AlbwL8D3uWAHhQyMDjKe9A0
IMP	1483110084490918C3D59E3914690E11
PESHA1	A282F0EAE29D6554F66B40BF8F04300E31F3558A
PE256	A5D101C9BC354E560E76DEC4205898151B9E2A7FB517E66EDC02EE433A84769F

DLL Exports:

Function Name	Ordinal	Type
DllRegisterServer	3	Exported Function
DllUnregisterServer	4	Exported Function
DllCanUnloadNow	1	Exported Function
DllGetClassObject	2	Exported Function

Signature

• Status: Signature verified.
• Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
• Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
• Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: perf_va.dll
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.1 (WinBuild.160101.0800)
• Product Version: 10.0.19041.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/76
• VirusTotal Link: https://www.virustotal.com/gui/file/c32c6913eb126121ad7162992b5a413825677685f214829692cab7f5a7fe4c8d/detection

File Similarity (ssdeep match)

File	Score
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\legacy\perf_va.dll	97

MIT License. Copyright (c) 2020-2021 Strontic.