» perf_memory.dll
Overview
Analysis
File Details
Programs (1)

perf_memory.dll

Microsoft Windows Performance Analyzer

Microsoft Corporation

This is installed with Windows Software Development Kit for Windows Store Apps.

File name:

perf_memory.dll

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Performance Analyzer

Description:

Performance Analyzer AddIn: Memory

Version:

6.3.9600.17298 (winblue.141024-1500)

MD5:

37979c670099fcc02fa6ff6e58d60360

SHA-1:

81051b92ebd8cd5c5159621b557615ed84eaa327

SHA-256:

700c176a1ebf59e8f8f99313e7f4cef08bbb5e5328921ac95518763875c02ea1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/26/2024 2:13:39 AM UTC (today)

File size:

283.5 KB (290,264 bytes)

Product version:

6.3.9600.17298

Original file name:

perf_memory.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\windows kits\8.1\bin\arm\appperfanalyzer\perf_memory.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

1/9/2014 10:35:01 AM

Valid to:

4/9/2015 11:35:01 AM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

330000003B7CA28C2BA5E37C0900000000003B

File PE Metadata

Compilation timestamp:

10/24/2014 5:16:39 PM

OS version:

6.3

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

11.0

CTPH (ssdeep):

3072:xzOiOecZqwOqJii0obtV6yR0pYqKG8Ga6utTlxLW+COZbB9qTPZ3vvWVd/Yn6klz:vGxv4UxtTTy+CybJu0IPmjefto1k

Entry address:

0x38DBD

Entry point:

E9, 78, 48, 0D, F1, 10, 0B, 0C, 46, 01, 2C, 15, 46, 06, 46, 01, D1, 00, F0, 11, FB, 2A, 46, 21, 46, 30, 46, FF, F7, 76, FE, BD, E8, 78, 88, 0F, B4, 2D, E9, F0, 49, 0D, F1, 14, 0B, 85, B0, 6F, 46, 1E, 46, 14, 46, BC, 63, 88, 46, 05, 46, 3D, 63, 64, 1E, BC, 63, 00, 2C, 05, DB, A5, EB, 08, 05, 3D, 63, 28, 46, B0, 47, F5, E7, 05, B0, BD, E8, F0, 09, 5D, F8, 14, FB, 10, B5, F8, 60, 38, 60, 3B, 68, 1B, 68, 7B, 60, 7B, 68, 1A, 68, 06, 4B, 9A, 42, 03, D0, 00, 23, BB, 60, B8, 68, 02, E0, 02, 4B, 1B, 68, 98, 47, 10... 
[+]

Entropy:

6.7748

Packer / compiler:

Xtreme-Protector v1.05

Code size:

235.5 KB (241,152 bytes)

The file perf_memory.dll has been discovered within the following programs.

Windows Software Development Kit for Windows Store Apps by Microsoft Corporation

The Windows Software Development Kit for Windows 8 (Windows SDK) contains headers, libraries, and a selection of tools that you can use when you create apps that run on Windows operating systems.

2% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.