Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
hansalemaos authored Jun 25, 2023
1 parent a819ca4 commit 463c72c
Show file tree
Hide file tree
Showing 8 changed files with 288 additions and 0 deletions.
75 changes: 75 additions & 0 deletions Eula.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
Sysinternals Software License Terms
These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from technet.microsoft.com/sysinternals, which includes the media on which you received it, if any. The terms also apply to any Sysinternals
* updates,
* supplements,
* Internet-based services,
* and support services
for this software, unless other terms accompany those items. If so, those terms apply.
BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.
If you comply with these license terms, you have the rights below.

Installation and User Rights

You may install and use any number of copies of the software on your devices.

Scope of License

The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not
* work around any technical limitations in the software;
* reverse engineer, decompile or disassemble the software, except and only to the extent that applicable law expressly permits, despite this limitation;
* make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;
* publish the software for others to copy;
* rent, lease or lend the software;
* transfer the software or this agreement to any third party; or
* use the software for commercial software hosting services.

Sensitive Information

Please be aware that, similar to other debug tools that capture “process state” information, files saved by Sysinternals tools may include personally identifiable or other sensitive information (such as usernames, passwords, paths to files accessed, and paths to registry accessed). By using this software, you acknowledge that you are aware of this and take sole responsibility for any personally identifiable or other sensitive information provided to Microsoft or any other party through your use of the software.

Documentation

Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.

Export Restrictions

The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see www.microsoft.com/exporting .

Support Services

Because this software is "as is," we may not provide support services for it.

Entire Agreement

This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.

Applicable Law

United States . If you acquired the software in the United States , Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.
Outside the United States . If you acquired the software in any other country, the laws of that country apply.

Legal Effect

This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.

Disclaimer of Warranty

The software is licensed "as-is." You bear the risk of using it. Sysinternals gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, sysinternals excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.

Limitation on and Exclusion of Remedies and Damages

You can recover from sysinternals and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.
This limitation applies to
* anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and
* claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.

It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.
Please note: As this software is distributed in Quebec , Canada , some of the clauses in this agreement are provided below in French.
Remarque : Ce logiciel étant distribué au Québec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en français.
EXONÉRATION DE GARANTIE. Le logiciel visé par une licence est offert « tel quel ». Toute utilisation de ce logiciel est à votre seule risque et péril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez bénéficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualité marchande, d'adéquation à un usage particulier et d'absence de contrefaçon sont exclues.
LIMITATION DES DOMMAGES-INTÉRÊTS ET EXCLUSION DE RESPONSABILITÉ POUR LES DOMMAGES. Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement à hauteur de 5,00 $ US. Vous ne pouvez prétendre à aucune indemnisation pour les autres dommages, y compris les dommages spéciaux, indirects ou accessoires et pertes de bénéfices.
Cette limitation concerne :
tout ce qui est relié au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et
les réclamations au titre de violation de contrat ou de garantie, ou au titre de responsabilité stricte, de négligence ou d'une autre faute dans la limite autorisée par la loi en vigueur.
Elle s'applique également, même si Sysinternals connaissait ou devrait connaître l'éventualité d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilité pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas à votre égard.
EFFET JURIDIQUE. Le présent contrat décrit certains droits juridiques. Vous pourriez avoir d'autres droits prévus par les lois de votre pays. Le présent contrat ne modifie pas les droits que vous confèrent les lois de votre pays si celles-ci ne le permettent pas.
75 changes: 75 additions & 0 deletions README.MD
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
# provides a convenient and efficient way to retrieve signature information (Microsoft's sigcheck) for files and converts it to a pandas DataFrame

## pip install sigdf

### Tested against Windows 10 / Python 3.10 / Anaconda


The get_sig_infos function is used to retrieve signature information for files located at a given path or paths
using the sigcheck.exe utility.
It collects information such as file signatures, file version, description, and other relevant details.

This function might be interesting for individuals or developers working with files and file security analysis.
It can be particularly useful for tasks like identifying the digital signatures of executable files, verifying file
authenticity, checking for file tampering, and gathering metadata about files in a specified location.

Advantages of the get_sig_infos function include:

### Automation:

The function automates the process of retrieving signature information for multiple files or folders,
saving time and effort compared to manually analyzing each file.

### Extensibility:

It allows users to specify the path(s) and file extensions to analyze,
making it flexible and adaptable to different scenarios and requirements.

### Integration with Pandas:

The function leverages Pandas to organize the collected information into a DataFrame,
enabling further data manipulation, analysis, and integration with other data processing workflows.

### Error Handling:

The function includes error handling mechanisms, such as ignoring exceptions during
the signature analysis and printing any encountered exceptions for debugging purposes.
This helps ensure that the function can handle a variety of scenarios and continue processing
files even if some exceptions occur.

### Performance Optimization:

The function applies performance optimization techniques, such as reducing memory usage
and using efficient Pandas operations,
to enhance the efficiency and speed of the signature analysis process.

```python


Args:
path (str|tuple|list): Path(s) to the file(s) or folder(s) to analyze. It can be a single path as a string,
a tuple of paths, or a list of paths.
extensions (tuple|list, optional): File extensions to consider. Only files with these extensions will be analyzed.
Defaults to () - Nothing will be ignored.

Returns:
pd.DataFrame: A Pandas DataFrame containing the signature information for the analyzed files.

from sigdf import get_sig_infos
df = get_sig_infos(path=r"C:\Program Files (x86)\BlueStacks X", extensions=())
print(df[:10].to_string())
Path Verified Date Publisher Company Description Product Product Version File Version Machine Type Binary Version Original Name Internal Name Copyright Comments Entropy MD5 SHA1 PESHA1 PESHA256 SHA256 IMP
0 c:\program files (x86)\bluestacks x\7z.dll Signed 2021-10-29 00:26:00 Bluestack Systems, Inc Igor Pavlov 7z Plugin 7-Zip 19.0 19.0 32-bit 19.0.0.0 7z.dll 7z Copyright (c) 1999-2018 Igor Pavlov NaN 6.623 544076DED188D227DBC7DC3C5D72762A 381A09F5D0B1C49492DA8EA91D5A5A9C08635534 8012FB95899DC92D049773F6B21DC776D7F6ACB7 4EBD65A45F27AD6CA66FD3969F883578530062E0A751C4F55E6CD1AC9AEE2E1B 721879078AFAC97327471023FC774C54F3248F47A1383A71EF61AC0DB470894B 622EAE4411B119BF4CA7BEE4FA1391C8
1 c:\program files (x86)\bluestacks x\7z.exe Signed 2021-10-29 00:26:00 Bluestack Systems, Inc Igor Pavlov 7-Zip Console 7-Zip 19.0 19.0 32-bit 19.0.0.0 7z.exe 7z Copyright (c) 1999-2018 Igor Pavlov NaN 6.603 DC1882CBD821506758F6C689C796BF3E E8C6C24CC0FF9A402ED51CC1756DC3A1A0F1EE49 D0EE4A7BD32FE712448785B1F5BC74E9305D1327 49E102C046CDF5E2375B60B9CF88806757FD0B13B99843E6E99E5D907EA2208B 9AD95EC3A25E89E19FA9AF5B254FECD8EF129D3C412B9A805B6911BB2D031FFD C2674610547987E150CA76C2C9C784A0
2 c:\program files (x86)\bluestacks x\api-ms-win-core-file-l1-2-0.dll Signed 2015-07-14 23:55:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.622 04C39B760247C6EED86854F657833347 9490B9DCD3F91B06FA7F3028DC5DF5B4A22D4FBC 7D3B10BA52968F88451AA8368FEC6B798BBBCB28 D296400340B5E1102E1DF12B1F997D408A9A5A184E88AFA4D4C9A6EEF0114EA6 F56B749C01CC82118FFE538674DF22A1F4EF7A07E94E559D25F55CE104E7B095 <NA>
3 c:\program files (x86)\bluestacks x\api-ms-win-core-file-l2-1-0.dll Signed 2015-07-14 23:55:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.733 8403E7B9EC4B0C4F6C9BF0EC93687C77 7581E7D872EC9C00F33BDAC9690E55096DB30172 90164EB28E0BE20C677D4C6BCA2F271CD75A31AE 3A5CAED01B3F498DC111365327A81D9787964CA19DB9D11102FD8A62B91E846C A8B79E230A81102735996500DD00D34BFA77955C11D87C0F9C967EC85003E116 <NA>
4 c:\program files (x86)\bluestacks x\api-ms-win-core-localization-l1-2-0.dll Signed 2015-07-14 23:56:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.666 2E2C78125C66CDE5859559F5E6167034 F00E9CDD8DA93106FB3BC060E64C643E2274A598 901F6DD87F70D2B89B59F9C6E1C09BB927CABFB6 1EC4863EEF89E9CA9B165FA9A25BA5914B8FCA2D5FCCAF041E9D798F37C5D0CE 9BF2BFF3ADCB1FB5707794B18320D7113F45446DD505EEE43ABBF8835CD73A44 <NA>
5 c:\program files (x86)\bluestacks x\api-ms-win-core-processthreads-l1-1-1.dll Signed 2015-07-14 23:56:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.653 5EFD5F4B617E95043898DBFD78AF97FB 70BABD7098B05C59484A9DBEA77F4B5DCD2BF9CC 89263725D098FC15982C1636591180461B38593C 961C541A92C71ED5BD0E7B3C56F2CAEE6F753B0654A530B89C1F28B9B81C165A CFCEFC5AF3F7A37242DCDBFEBEDBB954A0D21D93175441BCE680A1A4C1C9FEF3 <NA>
6 c:\program files (x86)\bluestacks x\api-ms-win-core-synch-l1-2-0.dll Signed 2015-07-14 23:55:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.701 FD9C6D2E90B3CF9C0D72F59B66EA1989 92BE1C1C7BC81E2EAEB22FDCE5946A0FB08E45F2 010F285E42AB1F9496EC17A087F2E4B9FFA53A76 C994FAF1B8D8B2983C7374BA2D9845BADED8F766F8675E6BE9A571A8EE2F81E3 05482DBB67F005E0B61BBD44CE04818254FFECB765F836324BBCB3DD174524FE <NA>
7 c:\program files (x86)\bluestacks x\api-ms-win-core-timezone-l1-1-0.dll Signed 2015-07-14 23:55:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.745 425083789D9D675B2BCFA9A603C9B3FA C6E4BCA5924406A675686B30EF5708732667E079 2B774BD436108E17877413A6C23DBA94BF23CDB8 049F29B7658A9E3B242F6180EF95C4AF92BF5B07086FEBD20DD06978903ACFC5 0006C449FDED67CB7CD9DFB4FA9310CE5103CA3B1344AF72052509C8B1CD4AD2 <NA>
8 c:\program files (x86)\bluestacks x\api-ms-win-core-xstate-l2-1-0.dll Signed 2015-07-14 23:56:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.649 2668196CED304462699D69EE80C19DFC 726F61F3F20528AF09DB801EF895AC11B228FA94 9DE1354ED86824686CF219F8B5F55367DBED011A BA9809B79ED5D3C610EB46680E2B3E82F735086880FFE0C5D878DCAE04B94D60 B1ED09F172A43A826853DE69851B8F2ABCB80577D67BD9755C45FAFC8199A2C9 <NA>
9 c:\program files (x86)\bluestacks x\api-ms-win-crt-conio-l1-1-0.dll Signed 2015-07-14 23:55:00 Microsoft Windows Microsoft Corporation ApiSet Stub DLL Microsoft Windows Operating System 10.0.10240.16390 10.0.10240.16390 (th1_st1.150714-1601) 32-bit 10.0.10240.16390 apisetstub apisetstub Microsoft Corporation. All rights reserved. NaN 6.626 8E534F49C77D787DB69BABFF931A497A 709380F53F4BEE25AD110869AC4E755391346405 F096EB68F5AF471D47CAEE160887C72E2BE9A9FF 36742CF2B4E66FCFF31D6CDCE23C0C4223B20A47D16DDC642F328CA5991C140C 5B679B8119BB5D53107C40C63DF667BAEF62DE75418C3E6B540FDBAFCCEDDCA6 <NA>



```
Loading

0 comments on commit 463c72c

Please sign in to comment.