unlodctr.exe

  • File Path: C:\Windows\SysWOW64\unlodctr.exe
  • Description: Unload PerfMon Counters

Hashes

Type Hash
MD5 F27AEE2E93F96E6DF370C0D83CF31D97
SHA1 0973E0BCB0CE3D7390953A21C5530AFD400C18AD
SHA256 47CF991CA0F91ADCD98AF1BADE9E2BCE82600D842237404BD6A5313A539B2E13
SHA384 D544A44EE41BBD2FEE5A75190AED821284F5DFBDE383E4AA61A02BE346EA3AA07DD5985582BA3F89276AF7A9B2FFDAFE
SHA512 8BCBD26F616D54441650DF2A83DBD20714F6674B83BB04B891C45C6F18600ABCB07371A852EAE8779FFB0AD22D376158337658F7E0F0033FD6F3507BA8C04111
SSDEEP 768:uZlM8QUUYOByqUZvtUPWVj9RjGd+QfHP:8lM81UrovtUPa9VG0QfHP
IMP 54DCED0AF2D07BD064A46424718177C1
PESHA1 B7836D58305BF46E088BC7B348ABE48EA69FF12C
PE256 CC31630D72678D59FEF60C123846AFC9BDA754688A33E0F828777F69BCAF0579

Runtime Data

Usage (stdout):



UNLODCTR
    Removes counter names and explain text for the specified extensible counter.

Usage:

    UNLODCTR <driver>
        driver is the name of the device driver which is to have its
            counter name definitions and explain text removed from the system's
            registry.

    UNLODCTR /m:<manifest>
        manifest is the name of the manifest file that contains performance
            counter definitions. These counters will be removed from local system.

    UNLODCTR /g:{ProviderGuid}
        ProviderGuid identifies the performance counter provider being unloaded.

    UNLODCTR /p:<ProviderName>
        ProviderName identifies the performance counter provider being unloaded.

Note: any arguments with spaces in the names must be enclosed within
Double Quotation marks.

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: UNLODCTR.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/47cf991ca0f91adcd98af1bade9e2bce82600d842237404bd6a5313a539b2e13/detection/

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


unlodctr

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Removes Performance counter names and Explain text for a service or device driver from the system registry.

[!WARNING] Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.

Syntax

unlodctr <drivername>

Parameters

Parameter Description
<drivername> Removes the Performance counter name settings and Explain text for driver or service <drivername> from the Windows Server registry. If your <drivername> includes spaces, you must use quotation marks around the text, for example “Driver name”.
/? Displays help at the command prompt.

Examples

To remove the current Performance counter names and Explain text for the Simple Mail Transfer Protocol (SMTP) service, type:

unlodctr SMTPSVC

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.