PerfCounter.dll

Description: Microsoft performance counter extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.9037.0

Architecture: 64-bit

Operating System: Windows

SHA256: 74349ddc24bd7c125f8adf8aff051fe7

File Size: 253.4 KB

Uploaded At: Dec. 1, 2025, 7:19 a.m.

Views: 25

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • OpenPerformanceData (Ordinal: 1, Address: 0x6330)
  • ClosePerformanceData (Ordinal: 2, Address: 0x6650)
  • CollectPerformanceData (Ordinal: 3, Address: 0x6480)
  • FormatFromRawValue (Ordinal: 4, Address: 0x66b0)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAccessAllowedAce (Address: 0x180023028)
  • AllocateAndInitializeSid (Address: 0x180023010)
  • EventWrite (Address: 0x180023058)
  • FreeSid (Address: 0x180023030)
  • GetLengthSid (Address: 0x180023018)
  • InitializeAcl (Address: 0x180023020)
  • InitializeSecurityDescriptor (Address: 0x180023000)
  • RegCloseKey (Address: 0x180023040)
  • RegCreateKeyExW (Address: 0x180023060)
  • RegEnumKeyExW (Address: 0x180023038)
  • RegOpenKeyExW (Address: 0x180023068)
  • RegQueryValueExW (Address: 0x180023048)
  • RegSetValueExW (Address: 0x180023050)
  • SetSecurityDescriptorDacl (Address: 0x180023008)
KERNEL32.dll
  • CloseHandle (Address: 0x180023118)
  • CreateEventW (Address: 0x1800231a8)
  • CreateFileW (Address: 0x1800232b0)
  • CreateMutexW (Address: 0x180023108)
  • CreateSemaphoreW (Address: 0x1800231e8)
  • DebugBreak (Address: 0x180023208)
  • DeleteCriticalSection (Address: 0x1800231e0)
  • EncodePointer (Address: 0x1800232c8)
  • EnterCriticalSection (Address: 0x180023170)
  • ExitProcess (Address: 0x180023330)
  • FindClose (Address: 0x1800232a8)
  • FindFirstFileExA (Address: 0x180023380)
  • FindNextFileA (Address: 0x180023388)
  • FlushFileBuffers (Address: 0x180023360)
  • FormatMessageW (Address: 0x180023250)
  • FreeEnvironmentStringsW (Address: 0x180023220)
  • FreeLibrary (Address: 0x180023150)
  • GetACP (Address: 0x180023240)
  • GetCommandLineA (Address: 0x1800230b0)
  • GetCommandLineW (Address: 0x1800230a8)
  • GetConsoleCP (Address: 0x180023370)
  • GetConsoleMode (Address: 0x180023378)
  • GetCPInfo (Address: 0x180023238)
  • GetCurrentProcess (Address: 0x180023288)
  • GetCurrentProcessId (Address: 0x1800232a0)
  • GetCurrentThreadId (Address: 0x180023278)
  • GetEnvironmentStringsW (Address: 0x180023228)
  • GetEnvironmentVariableW (Address: 0x180023218)
  • GetFileType (Address: 0x180023350)
  • GetLastError (Address: 0x180023120)
  • GetModuleFileNameA (Address: 0x180023340)
  • GetModuleFileNameW (Address: 0x180023210)
  • GetModuleHandleExW (Address: 0x180023338)
  • GetModuleHandleW (Address: 0x1800232b8)
  • GetOEMCP (Address: 0x1800230b8)
  • GetProcAddress (Address: 0x180023298)
  • GetProcessHeap (Address: 0x180023148)
  • GetProcessTimes (Address: 0x1800230f0)
  • GetStartupInfoW (Address: 0x180023308)
  • GetStdHandle (Address: 0x180023348)
  • GetStringTypeW (Address: 0x180023358)
  • GetSystemTimeAsFileTime (Address: 0x180023280)
  • GetVersionExW (Address: 0x1800230c8)
  • HeapAlloc (Address: 0x180023140)
  • HeapCreate (Address: 0x180023158)
  • HeapDestroy (Address: 0x1800231d8)
  • HeapFree (Address: 0x180023138)
  • HeapReAlloc (Address: 0x180023080)
  • HeapSize (Address: 0x180023088)
  • HeapValidate (Address: 0x1800231a0)
  • InitializeCriticalSection (Address: 0x180023198)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180023320)
  • InitializeSListHead (Address: 0x180023300)
  • InterlockedFlushSList (Address: 0x180023318)
  • IsDebuggerPresent (Address: 0x1800232c0)
  • IsProcessorFeaturePresent (Address: 0x1800232f8)
  • IsValidCodePage (Address: 0x180023390)
  • LCMapStringW (Address: 0x180023260)
  • LeaveCriticalSection (Address: 0x180023190)
  • LoadLibraryExW (Address: 0x180023230)
  • LocalFree (Address: 0x180023258)
  • MapViewOfFile (Address: 0x1800230d8)
  • MultiByteToWideChar (Address: 0x180023248)
  • OpenFileMappingW (Address: 0x1800230e0)
  • OpenMutexW (Address: 0x180023100)
  • OpenProcess (Address: 0x1800230f8)
  • OutputDebugStringW (Address: 0x180023130)
  • QueryPerformanceCounter (Address: 0x180023078)
  • QueryPerformanceFrequency (Address: 0x1800230c0)
  • RaiseException (Address: 0x1800231c8)
  • ReleaseMutex (Address: 0x180023128)
  • ReleaseSemaphore (Address: 0x180023180)
  • ResetEvent (Address: 0x1800231d0)
  • RtlCaptureContext (Address: 0x1800232d0)
  • RtlLookupFunctionEntry (Address: 0x1800232d8)
  • RtlPcToFileHeader (Address: 0x180023328)
  • RtlUnwindEx (Address: 0x180023310)
  • RtlVirtualUnwind (Address: 0x1800232e0)
  • SetEvent (Address: 0x1800231b0)
  • SetFilePointerEx (Address: 0x180023098)
  • SetLastError (Address: 0x180023270)
  • SetStdHandle (Address: 0x1800230a0)
  • SetUnhandledExceptionFilter (Address: 0x1800232f0)
  • SleepEx (Address: 0x1800231f0)
  • TerminateProcess (Address: 0x180023290)
  • TlsAlloc (Address: 0x1800231c0)
  • TlsFree (Address: 0x180023200)
  • TlsGetValue (Address: 0x1800231f8)
  • TlsSetValue (Address: 0x180023160)
  • UnhandledExceptionFilter (Address: 0x1800232e8)
  • UnmapViewOfFile (Address: 0x1800230e8)
  • VirtualAlloc (Address: 0x180023188)
  • VirtualFree (Address: 0x180023178)
  • VirtualProtect (Address: 0x180023168)
  • VirtualQuery (Address: 0x1800230d0)
  • WaitForSingleObject (Address: 0x180023110)
  • WaitForSingleObjectEx (Address: 0x1800231b8)
  • WideCharToMultiByte (Address: 0x180023268)
  • WriteConsoleW (Address: 0x180023090)
  • WriteFile (Address: 0x180023368)
mscoree.dll
  • GetRequestedRuntimeInfo (Address: 0x1800233c0)
OLEAUT32.dll
  • SetErrorInfo (Address: 0x1800233a0)
pdh.dll
  • PdhFormatFromRawValue (Address: 0x1800233d0)
USER32.dll
  • LoadStringW (Address: 0x1800233b0)