PerfCounter.dll

Description: Microsoft performance counter extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.9037.0

Architecture: 32-bit

Operating System: Windows

SHA256: 7d3c7e6c51eb519e8c1c9b64c48be174

File Size: 209.9 KB

Uploaded At: Dec. 1, 2025, 7:19 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • OpenPerformanceData (Ordinal: 1, Address: 0x12f60)
  • ClosePerformanceData (Ordinal: 2, Address: 0x130e0)
  • CollectPerformanceData (Ordinal: 3, Address: 0x13030)
  • FormatFromRawValue (Ordinal: 4, Address: 0x131e0)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAccessAllowedAce (Address: 0x10031014)
  • AllocateAndInitializeSid (Address: 0x10031008)
  • EventWrite (Address: 0x1003102c)
  • FreeSid (Address: 0x10031018)
  • GetLengthSid (Address: 0x1003100c)
  • InitializeAcl (Address: 0x10031010)
  • InitializeSecurityDescriptor (Address: 0x10031000)
  • RegCloseKey (Address: 0x10031020)
  • RegCreateKeyExW (Address: 0x10031030)
  • RegEnumKeyExW (Address: 0x1003101c)
  • RegOpenKeyExW (Address: 0x10031034)
  • RegQueryValueExW (Address: 0x10031024)
  • RegSetValueExW (Address: 0x10031028)
  • SetSecurityDescriptorDacl (Address: 0x10031004)
KERNEL32.dll
  • CloseHandle (Address: 0x1003108c)
  • CreateEventW (Address: 0x100310d8)
  • CreateFileW (Address: 0x10031158)
  • CreateMutexW (Address: 0x10031084)
  • CreateSemaphoreW (Address: 0x100310f8)
  • DecodePointer (Address: 0x10031168)
  • DeleteCriticalSection (Address: 0x100310f4)
  • EncodePointer (Address: 0x10031164)
  • EnterCriticalSection (Address: 0x100310bc)
  • ExitProcess (Address: 0x1003118c)
  • FindClose (Address: 0x10031154)
  • FindFirstFileExA (Address: 0x100311b4)
  • FindNextFileA (Address: 0x100311b8)
  • FlushFileBuffers (Address: 0x100311a4)
  • FormatMessageW (Address: 0x10031128)
  • FreeEnvironmentStringsW (Address: 0x10031110)
  • FreeLibrary (Address: 0x100310ac)
  • GetACP (Address: 0x10031120)
  • GetCommandLineA (Address: 0x10031054)
  • GetCommandLineW (Address: 0x10031050)
  • GetConsoleCP (Address: 0x100311ac)
  • GetConsoleMode (Address: 0x100311b0)
  • GetCPInfo (Address: 0x1003111c)
  • GetCurrentProcess (Address: 0x10031144)
  • GetCurrentProcessId (Address: 0x10031150)
  • GetCurrentThreadId (Address: 0x1003113c)
  • GetEnvironmentStringsW (Address: 0x10031114)
  • GetEnvironmentVariableW (Address: 0x1003110c)
  • GetFileType (Address: 0x1003119c)
  • GetLastError (Address: 0x10031090)
  • GetModuleFileNameA (Address: 0x10031194)
  • GetModuleFileNameW (Address: 0x10031108)
  • GetModuleHandleExW (Address: 0x10031190)
  • GetModuleHandleW (Address: 0x1003115c)
  • GetOEMCP (Address: 0x10031058)
  • GetProcAddress (Address: 0x1003114c)
  • GetProcessHeap (Address: 0x100310a8)
  • GetProcessTimes (Address: 0x10031078)
  • GetStartupInfoW (Address: 0x1003117c)
  • GetStdHandle (Address: 0x10031198)
  • GetStringTypeW (Address: 0x100311a0)
  • GetSystemTimeAsFileTime (Address: 0x10031140)
  • GetVersionExW (Address: 0x10031064)
  • HeapAlloc (Address: 0x100310a4)
  • HeapCreate (Address: 0x100310b0)
  • HeapDestroy (Address: 0x100310f0)
  • HeapFree (Address: 0x100310a0)
  • HeapReAlloc (Address: 0x1003109c)
  • HeapSize (Address: 0x10031040)
  • HeapValidate (Address: 0x100310d4)
  • InitializeCriticalSection (Address: 0x100310d0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10031188)
  • InitializeSListHead (Address: 0x10031178)
  • InterlockedFlushSList (Address: 0x10031184)
  • IsDebuggerPresent (Address: 0x10031160)
  • IsProcessorFeaturePresent (Address: 0x10031174)
  • IsValidCodePage (Address: 0x1003105c)
  • LCMapStringW (Address: 0x10031130)
  • LeaveCriticalSection (Address: 0x100310cc)
  • LoadLibraryExW (Address: 0x10031118)
  • LocalFree (Address: 0x1003112c)
  • MapViewOfFile (Address: 0x1003106c)
  • MultiByteToWideChar (Address: 0x10031124)
  • OpenFileMappingW (Address: 0x10031070)
  • OpenMutexW (Address: 0x10031080)
  • OpenProcess (Address: 0x1003107c)
  • OutputDebugStringW (Address: 0x10031098)
  • QueryPerformanceCounter (Address: 0x1003103c)
  • QueryPerformanceFrequency (Address: 0x10031060)
  • RaiseException (Address: 0x100310e8)
  • ReleaseMutex (Address: 0x10031094)
  • ReleaseSemaphore (Address: 0x100310c4)
  • ResetEvent (Address: 0x100310ec)
  • RtlUnwind (Address: 0x10031180)
  • SetEvent (Address: 0x100310dc)
  • SetFilePointerEx (Address: 0x10031048)
  • SetLastError (Address: 0x10031138)
  • SetStdHandle (Address: 0x1003104c)
  • SetUnhandledExceptionFilter (Address: 0x10031170)
  • SleepEx (Address: 0x100310fc)
  • TerminateProcess (Address: 0x10031148)
  • TlsAlloc (Address: 0x100310e4)
  • TlsFree (Address: 0x10031104)
  • TlsGetValue (Address: 0x10031100)
  • TlsSetValue (Address: 0x100310b4)
  • UnhandledExceptionFilter (Address: 0x1003116c)
  • UnmapViewOfFile (Address: 0x10031074)
  • VirtualAlloc (Address: 0x100310c8)
  • VirtualFree (Address: 0x100310c0)
  • VirtualProtect (Address: 0x100310b8)
  • VirtualQuery (Address: 0x10031068)
  • WaitForSingleObject (Address: 0x10031088)
  • WaitForSingleObjectEx (Address: 0x100310e0)
  • WideCharToMultiByte (Address: 0x10031134)
  • WriteConsoleW (Address: 0x10031044)
  • WriteFile (Address: 0x100311a8)
mscoree.dll
  • GetRequestedRuntimeInfo (Address: 0x100311d0)
OLEAUT32.dll
  • SetErrorInfo (Address: 0x100311c0)
pdh.dll
  • PdhFormatFromRawValue (Address: 0x100311d8)
USER32.dll
  • LoadStringW (Address: 0x100311c8)