https://github.com/gdatasoftwareag/typerefhasher

CLI tool to compute the TypeRefHash for .NET binaries.
https://github.com/gdatasoftwareag/typerefhasher

dotnet imphash malware reverse-engineering trh typerefhash

Last synced: 6 months ago
JSON representation

CLI tool to compute the TypeRefHash for .NET binaries.

• Host: GitHub
• URL: https://github.com/gdatasoftwareag/typerefhasher
• Owner: GDATASoftwareAG
• License: apache-2.0
• Created: 2020-06-25T09:03:34.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2021-11-10T11:49:42.000Z (almost 4 years ago)
• Last Synced: 2023-02-27T17:18:01.336Z (over 2 years ago)
• Topics: dotnet, imphash, malware, reverse-engineering, trh, typerefhash
• Language: C#
• Homepage: https://www.gdatasoftware.com/blog/2020/06/36164-introducing-the-typerefhash-trh
• Size: 2.84 MB
• Stars: 13
• Watchers: 11
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# TypeRef Hasher

[![license](https://img.shields.io/github/license/GDATASoftwareAG/TypeRefHasher.svg)](https://raw.githubusercontent.com/GDATASoftwareAG/TypeRefHasher/master/LICENSE)

[![Build](https://img.shields.io/azure-devops/build/gdatasoftware/TypeRefHasher/6.svg)](https://dev.azure.com/gdatasoftware/TypeRefHasher/_build?definitionId=6)

[![Test](https://img.shields.io/azure-devops/tests/gdatasoftware/TypeRefHasher/6.svg)](https://dev.azure.com/gdatasoftware/TypeRefHasher/_build?definitionId=6)

CLI tool to compute the [TypeRefHash (TRH)](https://www.gdatasoftware.com/blog/2020/06/36164-introducing-the-typerefhash-trh) for .NET binaries.

## Installation

There are multiple options to obtain the *TypeRefHasher*.

### Windows

Install the tool with [winget](https://github.com/microsoft/winget-cli). The tool gets added to your `PATH` environment variable.

```powershell

winget install GDATA.TypeRefHasher

```

Another option is to just download the binary or installer from the [GitHub Releases](https://github.com/GDATASoftwareAG/TypeRefHasher/releases) tab

1. `trh.msi` -> Windows x64 Installer (Allows uninstall and adds the tool to your `PATH`)

2. `trh.exe` -> Windows x64 (Standalone binary)

### Linux

Download the binary or installer from the [GitHub Releases](https://github.com/GDATASoftwareAG/TypeRefHasher/releases) tab.

1. `trh` -> Linux x64 (Standalone binary)

## Usage

The usage is as straight forward as possible.

Windows:

```powershell

> trh.exe file

```

Linux:

```bash

> trh file

```

In both cases the output is the TRH (example: 1defec485ab3060a9201f35d69cfcdec4b70b84a2b71c83b53795ca30d1ae8be) for the given file or an error message with a description why the hash could not be computed.

## Build & Deploy

Find more information [here](BUILD.md)