sdiageng.dll

  • File Path: C:\Windows\SysWOW64\sdiageng.dll
  • Description: Scripted Diagnostics Execution Engine

Hashes

Type Hash
MD5 B57AAE0EFDCB967A5C4B3A6330684294
SHA1 CF6C45E89668A34648A7471BB998FC480DD2512E
SHA256 CE2C34135A849759995632226EB5823DF0D54EECED7EEAAA1FBEC76295EAB846
SHA384 654553039330256CA9136D226B833B2E3A4777D97B10EEC5A3CF140CB9D30C51D827E57299280D26E2F4D383FEDDD5DB
SHA512 D4698C9690C0098CE092EC7E778265EA366EE00303FAF506D7CC43D6BC622265DC910BF91A7029C0FF6BB8EF3D583FE88A234450C0FCDB5D52CC8E38AD47A6A1
SSDEEP 3072:rIA/ygHTZllbA/nDJaqyqV1jf6idhUcR1G3MmzfzLgsUb0SeT+kIo7LEIz9JCKp5:mnQqyiMif7T4M8XbSeqDo7o8nf
IMP 6488A4046AAB05145478E53064A03F0A
PESHA1 5874CB4E756AC8F7891A13D92B43C49DE793C87E
PE256 E14F1A58281E850767175C080AA990694CD183E3731231E220F47E237B39B8C1

DLL Exports:

Function Name Ordinal Type
DllGetClassObject 2 Exported Function
DllCanUnloadNow 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: sdiageng.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/ce2c34135a849759995632226eb5823df0d54eeced7eeaaa1fbec76295eab846/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\sdiageng.dll 32

MIT License. Copyright (c) 2020-2021 Strontic.