Gridinsoft Logo

The c4dplugin.xdl64 File Analysis

Updated 28 days ago
Checked by Malware Check
c4dplugin.xdl64

Technical Analysis

File Name c4dplugin.xdl64
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.230.174
Database Version 2025-12-11 17:00:32 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
44,067,528
File Size (bytes)
2025-12-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d488d758eacb2032a18095d420177ae8
SHA1
ab56d6be2c64dcf3ca2f29dd8ac7ccbfba0a66f0
SHA256
3b3ab31c70652fdbc1e321950e06e030cdf1fd63b7418950235b9ce656926b77
SHA512
f8678cacfadbf51119fa5f8a72f27ade767f39d83ef67e166c099ec4b013274e66ddc39fac3568c89a33def2f60b26c6e4f966e9a83601afdb63308e7472d238
ImpHash
058084a41c25100d9740071cc9f77e0d

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x181cbfa84
Compilation Time 2022-09-26 09:15:16
Checksum 0x02a1645b (Actual: 0x02a1643f)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
PDB Path c4dplugin.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 28 libraries
Exports 2 functions
Resources 0 Resources
Sections 9 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 30,143,030 bytes 30,143,488 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D0C47C781A4B8987F77CB94C038FD68E
.rdata 0x01cc1000 10,437,900 bytes 10,438,144 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 52EA44CD9D11C7E2D3F8F3DFB433CBBF
.data 0x026b6000 6,292,760 bytes 855,552 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9D79BBFD24FBEA049B12849AF1B7FCB7
.pdata 0x02cb7000 2,379,480 bytes 2,379,776 bytes 6.98 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BCDEC853B506B10013A8672D08607377
.00cfg 0x02efc000 40 bytes 512 bytes 0.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B15B30713200E2BF66CDD5E266C0C493
.gehcont 0x02efd000 16 bytes 512 bytes 0.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 45A6D3894CC84AA3B9EC267D34C858A9
.retplne 0x02efe000 60 bytes 512 bytes 0.84 (Normal) 0x00000000 701C598F46CFBAF23B9249F46376A9B9
.tls 0x02eff000 25 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B30464E69ECC4F2C756FA8FF158A38F1
.reloc 0x02f00000 226,764 bytes 226,816 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 5B17300F2D8AB99FBB2E47E352E067E9
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼
Certificate Information
Signing Date 10:46 AM 09/27/2022 (1200 days ago)
Verification Status The digital signature of the object did not verify.
Signers Maxon Computer GmbH; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware