perfhost.exe
- File Path:
C:\Windows\SysWOW64\perfhost.exe
- Description: x86 Performance Counter Host
Hashes
| Type |
Hash |
| MD5 |
2FC7CFCEDBF7E038351C7CEB1036D2E1 |
| SHA1 |
E826FDD69BDB47C8B13E4CD19CAD5F2AB0580400 |
| SHA256 |
41D7DA706F0CF613DF768B6795CD09C5C1035F9F101051FB58F5042EB4352DB6 |
| SHA384 |
16EE1E11FB45BBA1D02CED2604E5696DCAC529B94B537F018909A4BD8F5C89D25FF1FA8F4547BC0561186A394DF8C0EC |
| SHA512 |
1C8B2FD49BAEB1BCD106D1C4306B4A559A607F3CED62DCF814C1CEF218A31254F5112F52CBCA4EFC04265ED9C638D54A5D608F63532D5239AE65457B450BA353 |
| SSDEEP |
384:PabW9bWlzvC3qZKrntZL1Zp+lF6Wv0WV5Ftgh5D:CumWlnpOFj9kD |
| IMP |
8D5844FD312E4B4DE80E5A985C8DF3AC |
| PESHA1 |
FF575B49C069F6C32F96A4BF40B7A62AEBBCBB09 |
| PE256 |
39F1BB1FD219E3316BE9DDCE53ECE93819CA00F3936730B21B62C6EA75625111 |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\perfhost.exe |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: perfhost.exe.mui
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/76
- VirusTotal Link: https://www.virustotal.com/gui/file/41d7da706f0cf613df768b6795cd09c5c1035f9f101051fb58f5042eb4352db6/detection
MIT License. Copyright (c) 2020-2021 Strontic.