dxdiag.exe

  • File Path: C:\windows\SysWOW64\dxdiag.exe
  • Description: Microsoft DirectX Diagnostic Tool

Screenshot

dxdiag.exe

Hashes

Type Hash
MD5 0AE0600292768660DEED436FCBFE1BB1
SHA1 0319AF06B2BBC088BAC6939827062EDEB5B67853
SHA256 FCB3A1BCBE786C808F6ACC7CC0A8906DEB37C83B170A937F9CCA5635FCEA35E5
SHA384 95D6D96842A6B3EF1E5D78F6FC5F61424DF55D9FFFCFC47C783CE0460DA6BAD5F86FAC9044572FBECDBCC3E813B94612
SHA512 7E7C2E71B8F5374DDFB8FD0C8C80183BFDFE12B0287BA33ED09706DC3FE5CA6A8283F0D521B76591497E9E710E8442ACFAEED77DD66FB77789575EDB0C4ECD15
SSDEEP 3072:x6bidZHYPY8afJHV2Yxp7WJ3mQWHRKoT+Tu4Sna7UrgW38JI4WZcdbJL9brhFPVQ:Yo6PtafJ//7WJ3Ev+KSUrIq4MWhNPcx

Signature

  • Status: The file C:\windows\SysWOW64\dxdiag.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: dxdiag.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Possible Misuse

The following table contains possible examples of dxdiag.exe being misused. While dxdiag.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma registry_event_persistence_search_order.yml Image: 'C:\WINDOWS\SYSTEM32\dxdiag.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.