| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2021-Sep-01 04:19:17 |
| Detected languages |
English - United States
Japanese - Japan |
| Debug artifacts |
C:\msvss\K5Project\RadioSwitchDriver\dev\WOR\!Output\x64\Driver-Release\fjwrdswd.pdb
|
| CompanyName | FUJITSU CLIENT COMPUTING LIMITED |
| FileDescription | Wireless Radio Switch Driver |
| FileVersion | 2.3.0.0 |
| InternalName | fjwrdswd.dll |
| LegalCopyright | Copyright FUJITSU CLIENT COMPUTING LIMITED 2012-2021 |
| OriginalFilename | fjwrdswd.dll |
| ProductName | Wireless Radio Switch Driver |
| ProductVersion | 2.3.0.0 |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
May have dropper capabilities:
|
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: FUJITSU CLIENT COMPUTING LIMITED
Issuer: Sectigo RSA Code Signing CA |
| Safe | VirusTotal score: 0/72 (Scanned on 2025-11-28 17:08:39) | All the AVs think this file is safe. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x120 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 7 |
| TimeDateStamp | 2021-Sep-01 04:19:17 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x9800 |
| SizeOfInitializedData | 0x6000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000006400 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x180000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | A.0 |
| ImageVersion | A.0 |
| SubsystemVersion | A.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x15000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x26581 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| ntdll.dll |
DbgPrintEx
RtlPcToFileHeader RtlUnwindEx RtlInitUnicodeString |
|---|---|
| KERNEL32.dll |
ReleaseSemaphore
WaitForSingleObject CreateEventW CreateSemaphoreW CreateThreadpoolWait SetThreadpoolWait WaitForThreadpoolWaitCallbacks CloseThreadpoolWait SetEvent DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError CloseHandle GetProcAddress FreeLibrary GetCurrentProcessId LoadLibraryW SetLastError QueryPerformanceCounter ResetEvent EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc InterlockedFlushSList RaiseException InitializeSListHead GetSystemTimeAsFileTime __C_specific_handler ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentThreadId |
| ADVAPI32.dll |
InitializeSid
SetSecurityDescriptorDacl MakeSelfRelativeSD MakeAbsoluteSD IsValidSid RegGetValueW InitializeSecurityDescriptor InitializeAcl GetSidSubAuthority TraceMessage RegisterTraceGuidsW UnregisterTraceGuids GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags GetSidLengthRequired GetSecurityDescriptorSacl GetSecurityDescriptorOwner GetSecurityDescriptorLength GetSecurityDescriptorGroup GetSecurityDescriptorDacl GetSecurityDescriptorControl GetLengthSid GetAclInformation CopySid AddAce |
| api-ms-win-crt-stdio-l1-1-0.dll |
__stdio_common_vswscanf
__stdio_common_vswprintf_s __stdio_common_vsprintf_s |
| api-ms-win-crt-runtime-l1-1-0.dll |
_initterm
_execute_onexit_table _crt_atexit _errno _invalid_parameter_noinfo _initterm_e terminate abort _cexit _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function |
| api-ms-win-crt-heap-l1-1-0.dll |
free
calloc _callnewh malloc |
| api-ms-win-crt-string-l1-1-0.dll |
strcpy_s
|
| Ordinal | 1 |
|---|---|
| Address | 0x56e0 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.3.0.0 |
| ProductVersion | 2.3.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | English - United States |
| CompanyName | FUJITSU CLIENT COMPUTING LIMITED |
| FileDescription | Wireless Radio Switch Driver |
| FileVersion (#2) | 2.3.0.0 |
| InternalName | fjwrdswd.dll |
| LegalCopyright | Copyright FUJITSU CLIENT COMPUTING LIMITED 2012-2021 |
| OriginalFilename | fjwrdswd.dll |
| ProductName | Wireless Radio Switch Driver |
| ProductVersion (#2) | 2.3.0.0 |
| Resource LangID | Japanese - Japan |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2021-Sep-01 04:19:17 |
| Version | 0.0 |
| SizeofData | 109 |
| AddressOfRawData | 0xd598 |
| PointerToRawData | 0xc198 |
| Referenced File | C:\msvss\K5Project\RadioSwitchDriver\dev\WOR\!Output\x64\Driver-Release\fjwrdswd.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2021-Sep-01 04:19:17 |
| Version | 0.0 |
| SizeofData | 924 |
| AddressOfRawData | 0xd608 |
| PointerToRawData | 0xc208 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2021-Sep-01 04:19:17 |
| Version | 0.0 |
| SizeofData | 4 |
| AddressOfRawData | 0xd9a4 |
| PointerToRawData | 0xc5a4 |
| StartAddressOfRawData | 0x18000d9c8 |
|---|---|
| EndAddressOfRawData | 0x18000d9d0 |
| AddressOfIndex | 0x1800102b8 |
| AddressOfCallbacks | 0x18000b3b8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
| Size | 0x138 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x180010078 |
| GuardCFCheckFunctionPointer | 6442496872 |
| GuardCFDispatchFunctionPointer | 0 |
| GuardCFFunctionTable | 0 |
| GuardCFFunctionCount | 0 |
| GuardFlags | (EMPTY) |
| CodeIntegrity.Flags | 0 |
| CodeIntegrity.Catalog | 0 |
| CodeIntegrity.CatalogOffset | 0 |
| CodeIntegrity.Reserved | 0 |
| GuardAddressTakenIatEntryTable | 0 |
| GuardAddressTakenIatEntryCount | 0 |
| GuardLongJumpTargetTable | 0 |
| GuardLongJumpTargetCount | 0 |
| XOR Key | 0xe73401f7 |
|---|---|
| Unmarked objects | 0 |
| C++ objects (30034) | 36 |
| C objects (30034) | 9 |
| ASM objects (30034) | 5 |
| Imports (VS2008 SP1 build 30729) | 14 |
| Imports (29395) | 3 |
| Total imports | 113 |
| C++ objects (CVTCIL) (29395) | 2 |
| ASM objects (29395) | 2 |
| C objects (29395) | 3 |
| C++ objects (VS2019 Update 11 (16.11.0-3) compiler 30133) | 5 |
| C objects (VS2019 Update 11 (16.11.0-3) compiler 30133) | 3 |
| Exports (VS2019 Update 11 (16.11.0-3) compiler 30133) | 1 |
| Resource objects (VS2019 Update 11 (16.11.0-3) compiler 30133) | 1 |
| Linker (VS2019 Update 11 (16.11.0-3) compiler 30133) | 1 |
No comments yet.