typeperf.exe

  • File Path: C:\WINDOWS\SysWOW64\typeperf.exe
  • Description: Command line performance monitor

Hashes

Type Hash
MD5 3A46F5A821C7A59BBA70663215DB1A38
SHA1 AE44C45AE6B017F1261628A12719495E25413DDD
SHA256 2B8EF4DBA0DA835CB701A396EDDA38213C6B8E0A190F5F58E5F7BD75765DFF54
SHA384 F28ECE2EE9AFB2E05BAB7C9CB64833E7445F6924CEE89EAB2C6651B1994D23F27E4912E522C97889B0B53A4DDC37F8E1
SHA512 84399B8CB9F46F72CCD15F23594D065BAD302E91EF9779AF59EDA2B3CF94750C7E1CF180A3D1D5195FD888EAE477DFC18825F3AB52F794F00BDA8B3D5992ED70
SSDEEP 768:YSLezjqbCXeWr/tsBO862y9oV27Rm/NHNGlgiP2qKTezj3DP1upKbaoa3Nktnog:YSuwqr32PuR2NQEqKADdupKb7a3Nkto
IMP 33FA1E3F97809E906830DBA26E3D87E4
PESHA1 147F4611E958B18F782ACB42EC4C13192559CA32
PE256 81458841102DE0791EFE4F9EA46EEE8C39C7F552733419A8426B5CAF7D7270FE

Runtime Data

Usage (stdout):


Microsoft r TypePerf.exe (10.0.22000.1)

Typeperf writes performance data to the command window or to a log file. To
stop Typeperf, press CTRL+C.

Usage:
C:\WINDOWS\SysWOW64\typeperf.exe { <counter [counter ...]> 
                                | -cf <filename> 
                                | -q [object] 
                                | -qx [object] 
                                } [options]

Parameters:
  <counter [counter ...]>       Performance counters to monitor.

Options:
  -?                            Displays context sensitive help.
  -f <CSV|TSV|BIN|SQL>          Output file format. Default is CSV.
  -cf <filename>                File containing performance counters to
                                monitor, one per line.
  -si <[[hh:]mm:]ss>            Time between samples. Default is 1 second.
  -o <filename>                 Path of output file or SQL database. Default
                                is STDOUT.
  -q [object]                   List installed counters (no instances). To
                                list counters for one object, include the
                                object name, such as Processor.
  -qx [object]                  List installed counters with instances. To
                                list counters for one object, include the
                                object name, such as Processor.
  -sc <samples>                 Number of samples to collect. Default is to
                                sample until CTRL+C.
  -config <filename>            Settings file containing command options.
  -s <computer_name>            Server to monitor if no server is specified
                                in the counter path.
  -y                            Answer yes to all questions without prompting.

Note:
  Counter is the full name of a performance counter in
  "\\<Computer>\<Object>(<Instance>)\<Counter>" format,
  such as "\\Server1\Processor(0)\% User Time".

Examples:
  typeperf "\Processor(_Total)\% Processor Time"
  typeperf -cf counters.txt -si 5 -sc 50 -f TSV -o domain2.tsv
  typeperf -qx PhysicalDisk -o counters.txt

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\typeperf.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: TypePerf.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/2b8ef4dba0da835cb701a396edda38213c6b8e0a190f5f58e5f7bd75765dff54/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.

typeperf

The typeperf command writes performance data to the command window or to a log file. To stop typeperf, press CTRL+C.

Syntax

typeperf <counter [counter ...]> [options]
typeperf -cf <filename> [options]
typeperf -q [object] [options]
typeperf -qx [object] [options]

Parameters

Parameter Description
<counter [counter […]]> Specifies performance counters to monitor. The <counter> parameter is the full name of a performance counter in \Computer\Object(Instance)\Counter format, such as \\Server1\Processor(0)\% User Time.
Options
Option Description
-f <CSV | TSV | BIN | SQL> Specifies the output file format. The default is CSV.
-cf <filename> Specifies a file containing a list of performance counters to monitor, with one counter per line.
-si <[[hh:]mm:]ss> Specifies the sample interval. The default is one second.
-o <filename> Specifies the path for the output file, or the SQL database. The default is STDOUT (written to the command window).
-q [object] Display a list of installed counters (no instances). To list counters for one object, include the object name. ***EXAMPLE
-qx [object] Display a list of installed counters with instances. To list counters for one object, include the object name.
-sc <samples> Specifies the number of samples to collect. The default is to collect data until CTRL+C is pressed.
-config <filename> Specifies a settings file containing command options.
-s <computer_name> Specifies a remote computer to monitor if no computer is specified in the counter path.
-y Answer yes to all questions without prompting.
/? Displays help at the command prompt.

Examples

To write the values for the local computer’s performance counter \Processor(_Total)\% Processor Time to the command window at a default sample interval of 1 second until CTRL+C is pressed, type:

typeperf \Processor(_Total)\% Processor Time

To write the values for the list of counters in the file counters.txt to the tab-delimited file domain2.tsv at a sample interval of 5 seconds until 50 samples have been collected, type:

typeperf -cf counters.txt -si 5 -sc 50 -f TSV -o domain2.tsv

To query installed counters with instances for the counter object PhysicalDisk and writes the resulting list to the file counters.txt, type:

typeperf -qx PhysicalDisk -o counters.txt

Additional References

MIT License. Copyright (c) 2020-2021 Strontic.