typeperf.exe

  • File Path: C:\WINDOWS\system32\typeperf.exe
  • Description: Command line performance monitor

Hashes

Type Hash
MD5 1E6EB4665BE20DAD97B32B1C14E4C2EF
SHA1 D43D5D4E8AD72469853341BF3A00CD34F4E0A152
SHA256 3B9C3916765D0280401720ED7E61B6B68BC6F881E6D93BD000CF024DD9A2ECD3
SHA384 F72A5EB977017367DF6AF4ADAABDC3DC2258AA84403D9879BF19C8E779B1E5896E26C978C05D3FF76486E89566918681
SHA512 2C563DE7D37540B18C1E99BBA8B6F7E7134B830323446755375C145E6F3209B5E901F965CC7BECBEFF4483BCE4620FDE7C6295FC7F3DD2C51E05F92019CDF7D3
SSDEEP 1536:XZjRdodOhbhAe4guog+qLQ2hW8c2HkRjEzagNi+d:X1R3hAXZPUVEzaaiq
IMP A743030A338435A338D8ACB1ADC3177A
PESHA1 D0233E08C0A271239AACACF70C81E7990AC711DB
PE256 B915B4B8F3E02C1D8A9C0AD5B63666EEF863CE3F5E157025B53B257BDDD44539

Runtime Data

Usage (stdout):


Microsoft r TypePerf.exe (10.0.22000.1)

Typeperf writes performance data to the command window or to a log file. To
stop Typeperf, press CTRL+C.

Usage:
C:\WINDOWS\system32\typeperf.exe { <counter [counter ...]> 
                                | -cf <filename> 
                                | -q [object] 
                                | -qx [object] 
                                } [options]

Parameters:
  <counter [counter ...]>       Performance counters to monitor.

Options:
  -?                            Displays context sensitive help.
  -f <CSV|TSV|BIN|SQL>          Output file format. Default is CSV.
  -cf <filename>                File containing performance counters to
                                monitor, one per line.
  -si <[[hh:]mm:]ss>            Time between samples. Default is 1 second.
  -o <filename>                 Path of output file or SQL database. Default
                                is STDOUT.
  -q [object]                   List installed counters (no instances). To
                                list counters for one object, include the
                                object name, such as Processor.
  -qx [object]                  List installed counters with instances. To
                                list counters for one object, include the
                                object name, such as Processor.
  -sc <samples>                 Number of samples to collect. Default is to
                                sample until CTRL+C.
  -config <filename>            Settings file containing command options.
  -s <computer_name>            Server to monitor if no server is specified
                                in the counter path.
  -y                            Answer yes to all questions without prompting.

Note:
  Counter is the full name of a performance counter in
  "\\<Computer>\<Object>(<Instance>)\<Counter>" format,
  such as "\\Server1\Processor(0)\% User Time".

Examples:
  typeperf "\Processor(_Total)\% Processor Time"
  typeperf -cf counters.txt -si 5 -sc 50 -f TSV -o domain2.tsv
  typeperf -qx PhysicalDisk -o counters.txt

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\system32\typeperf.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TypePerf.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/3b9c3916765d0280401720ed7e61b6b68bc6f881e6d93bd000cf024dd9a2ecd3/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

typeperf

The typeperf command writes performance data to the command window or to a log file. To stop typeperf, press CTRL+C.

Syntax

typeperf <counter [counter ...]> [options]
typeperf -cf <filename> [options]
typeperf -q [object] [options]
typeperf -qx [object] [options]

Parameters

Parameter Description
<counter [counter […]]> Specifies performance counters to monitor. The <counter> parameter is the full name of a performance counter in \Computer\Object(Instance)\Counter format, such as \\Server1\Processor(0)\% User Time.
Options
Option Description
-f <CSV | TSV | BIN | SQL> Specifies the output file format. The default is CSV.
-cf <filename> Specifies a file containing a list of performance counters to monitor, with one counter per line.
-si <[[hh:]mm:]ss> Specifies the sample interval. The default is one second.
-o <filename> Specifies the path for the output file, or the SQL database. The default is STDOUT (written to the command window).
-q [object] Display a list of installed counters (no instances). To list counters for one object, include the object name. ***EXAMPLE
-qx [object] Display a list of installed counters with instances. To list counters for one object, include the object name.
-sc <samples> Specifies the number of samples to collect. The default is to collect data until CTRL+C is pressed.
-config <filename> Specifies a settings file containing command options.
-s <computer_name> Specifies a remote computer to monitor if no computer is specified in the counter path.
-y Answer yes to all questions without prompting.
/? Displays help at the command prompt.

Examples

To write the values for the local computer’s performance counter \Processor(_Total)\% Processor Time to the command window at a default sample interval of 1 second until CTRL+C is pressed, type:

typeperf \Processor(_Total)\% Processor Time

To write the values for the list of counters in the file counters.txt to the tab-delimited file domain2.tsv at a sample interval of 5 seconds until 50 samples have been collected, type:

typeperf -cf counters.txt -si 5 -sc 50 -f TSV -o domain2.tsv

To query installed counters with instances for the counter object PhysicalDisk and writes the resulting list to the file counters.txt, type:

typeperf -qx PhysicalDisk -o counters.txt

Additional References

MIT License. Copyright (c) 2020-2021 Strontic.