» CTRPP.EXE
Overview
Analysis
File Details

CTRPP.EXE

parse/validate performance counter manifest and generate helper source files

Wedson Almeida Filho

File name:

CTRPP.EXE

Publisher:

Microsoft Corporation (signed by Wedson Almeida Filho)

Product:

Microsoft® Windows® Operating System

Description:

parse/validate performance counter manifest and generate helper source files

Version:

6.1.7013.0 (fbl_fun_diag_dev(wedsonaf).080808-1750)

MD5:

ec1ca29febec13c5461203dd046ed1b8

SHA-1:

cc2a234c19896902c1eae5b9c7dfe23cc3df15af

SHA-256:

43a7e68b05277b2fa1ac04cecea598347bfb5fbb9ade17a5035a8d7e5619adbc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/8/2024 7:28:15 PM UTC (today)

File size:

258 KB (264,168 bytes)

Product version:

6.1.7013.0

Original file name:

CTRPP.EXE

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Wedson Almeida Filho

Authority:

Microsoft Windows NTDEV

Valid from:

8/7/2008 5:20:41 PM

Valid to:

4/9/2009 5:14:32 PM

Subject:

CN=Wedson Almeida Filho

Issuer:

CN=Microsoft Windows NTDEV

Serial number:

5ADFEDE400030002D7C2

File PE Metadata

Compilation timestamp:

1/6/2009 12:52:07 PM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

3072:b6dDMX3n4J8x4Q+2me2x8qQ8xXkzq7Q70UBErno02zvvg4ZdGSmMKaWMO6yk6/wg:+dDNM7t+rno02zvowdFPp0

Entry address:

0x11831

Entry point:

E8, F1, 0E, 00, 00, E9, C3, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 3B, 0D, C4, 20, 02, 01, 75, 02, F3, C3, E9, 5D, 0F, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 04, 2B, C8, 1B, C0, F7, D0, 23, C8, 8B, C4, 25, 00, F0, FF, FF, 3B, C8, 72, 0A, 8B, C1, 59, 94, 8B, 00, 89, 04, 24, C3, 2D, 00, 10, 00, 00, 85, 00, EB, E9, CC, CC, CC, CC, CC, FF, 25, A0, 11, 00, 01, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, D0, 02, 00, 00, A1, C4, 20, 02, 01, 33, C5, 89, 45, FC, 89... 
[+]

Entropy:

5.8225

Code size:

130 KB (133,120 bytes)

Scan CTRPP.EXE - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.