perfts.dll

  • File Path: C:\Windows\system32\perfts.dll
  • Description: Windows Remote Desktop Services Performance Objects

Hashes

Type Hash
MD5 7307E2B94FBC9374D8D3D0580D070444
SHA1 07E93BF5FABD3CE80F3DD95F0CED22EB74634396
SHA256 29CC580F869E27AB4047088CB2BECF53D3DE113978A82F19AC3FA7195E6ECFA6
SHA384 6F002A544890197D2B5500B53E52C3D425700A8F9291D85D38AD118ACA0C8218278588AA232C6CDDC1B25CF4F9CE0CA1
SHA512 0DAB412E50206815C8C3ECEDEF45DB49C0D8ACF975DD2DB0BAADA282FD3D96FE30004EC84B774D2B2758E8CF69E9841081AB4F281BEEA826527EB67BDDE64B07
SSDEEP 768:uO+7Dzyt6qxYZ1kjXsXcVOjfisLqsPZFDCYW3uDABl0uQ75pE2:uO2/ye1GXsYCasLqsPZFDBWeDAB+V75p
IMP 0A9B5EB1517CAE475B3A6CCF36545C07
PESHA1 E623B65D6A152A353407F305C2C39E7178FE6856
PE256 87F3C970D8081BE2F9D2BF71DA0E2B23B57BB258D456FF554D16929FC167F88A

DLL Exports:

Function Name Ordinal Type
CollectTSObjectData 2 Exported Function
OpenLagPerfData 4 Exported Function
OpenTSObject 1 Exported Function
CloseLagPerfData 6 Exported Function
CloseTSObject 3 Exported Function
CollectLagPerfData 5 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: perfts.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/29cc580f869e27ab4047088cb2becf53d3de113978a82f19ac3fa7195e6ecfa6/detection/

MIT License. Copyright (c) 2020-2021 Strontic.