Gridinsoft Logo
File Icon

The PKHeX.exe (PKHeX) File Analysis

Technical Analysis

File Name PKHeX.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.227.174
Database Version 2025-10-17 00:00:19 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
50,193,928
File Size (bytes)
2025-10-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2bb4614e003ac3aa7c2a3cb792947a4d
SHA1
4306e0f6847dd9f0bb110149648a4d3cf0933427
SHA256
0d19a85e6c217108d902737f408b88031dc31462ad341d63cce9cacbe0ffacc5
SHA512
d6d7f96a929fb516ea994a37973c623ceb9a6906360307ee2227b14f400859239b8d033889b80c444d4ca128b3441243a47cde69962c6eaabb9af588d7751dbb
ImpHash
7a8c872f8e13d32f36a675b52eda1d6e

PE Analysis

Basic Information

Icon
Hash: c22251c04cfcef882cb3c4d792cd8dc1
Fuzzy: 2833c015cccd37b267f8b2f872b79a4e
dHash: 94b2ccb2968eb2cc
Image Base 0x140000000
Entry Point 0x140012590
Compilation Time 2025-08-19 04:39:28
Checksum 0x00000000 (Actual: 0x02feadc1)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 0 functions
Resources 5 Resources
Sections 6 Sections

Version Information

Translation 0x0000 0x04b0
Comments Pokémon Save Editor
CompanyName Project Pokémon
FileDescription PKHeX
FileVersion 25.9.25.0
InternalName PKHeX.dll
LegalCopyright Kaphotics
OriginalFilename PKHeX.dll
ProductName PKHeX
ProductVersion 25.09.25+250926215935
Assembly Version 25.9.25.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 93,564 bytes 93,696 bytes 6.35 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 26026AD668E1CFA8132AF68D60BBC105
.rdata 0x00018000 50,080 bytes 50,176 bytes 4.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8E4ADC2FA59962111685DCFB374AEADE
.data 0x00025000 6,728 bytes 3,072 bytes 2.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 36F585DD876FE4D98D2F1D62A075B7E0
.pdata 0x00027000 5,172 bytes 5,632 bytes 4.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 71F3DD5FB1E930F031533CF204E89271
.reloc 0x00029000 828 bytes 1,024 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 13EF113FA36778A3D5B2AAD10DCDE405
.rsrc 0x0002a000 7,076 bytes 7,168 bytes 5.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9EA4DFC8E03872850D8BFFE9514A4CED

Resource Analysis

Total Resources: 5 (6,720 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 5,392 bytes
80.2%
RT_GROUP_ICON 1 34 bytes
0.5%
RT_VERSION 1 804 bytes
12%
RT_MANIFEST 1 490 bytes
7.3%

Certificate Chain Analysis

Certificate Information
Product PKHeX
Description PKHeX
File Version 25.9.25.0
Original Name PKHeX.dll
Internal Name PKHeX.dll
Copyright Kaphotics

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware