Gridinsoft Logo

The dxgi.dll (crosire's ReShade post-processing injector for 64-bit) File Analysis

Updated 1 month ago
Checked by Malware Check
dxgi.dll

Technical Analysis

File Name dxgi.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-23 18:00:13 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,746,752
File Size (bytes)
2025-05-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fcff571d4a5b27b83910d8fcd61c6725
SHA1
182d26686059d17ba93d94a3691d8f93c066f0e1
SHA256
8b38372587aab7289954ed9ca1bdb298adc9435292e0c0111632832b75ddc49a
SHA512
73bfea9c23c412335f1739bcdb3ba8c6ef7e7ab2ad0fb95f5144c218d7675e4f64b103cd43b7f40d805e3e2572a04b24e3abe5d3ac421c6ed646dfb124d8fa48
ImpHash
291ae4086e16aad577e300c071336d5e

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x18032126c
Compilation Time 2024-10-29 19:23:41
Checksum 0x00000000 (Actual: 0x00488390)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 11 libraries
Exports 468 functions
Resources 1647 Resources
Sections 7 Sections

Version Information

▼
CompanyName crosire
FileVersion 6.3.3.1921
ProductName ReShade
ProductVersion 6.3.3
LegalCopyright Copyright © 2014. All rights reserved.
FileDescription crosire's ReShade post-processing injector for 64-bit
OriginalFilename ReShade64.dll
Translation 0x0400 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,468,600 bytes 3,468,800 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A319D837337FB005D53FC297C6935D81
.rdata 0x00350000 702,966 bytes 702,976 bytes 6.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0305BD37DB9FD64D59982B9ABBB6C717
.data 0x003fc000 282,996 bytes 16,384 bytes 4.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 63B9366C14536833CD10CC9A1CFB4132
.pdata 0x00442000 168,444 bytes 168,448 bytes 6.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 586A4C994AB6E9F6CECB7B8FC0B80C38
_RDATA 0x0046c000 59,616 bytes 59,904 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9E2D22F97DC3AEB9AFD9C8BC985B1402
.rsrc 0x0047b000 316,000 bytes 316,416 bytes 4.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F7DABA5C685C686E9058C8058840447D
.reloc 0x004c9000 12,372 bytes 12,800 bytes 5.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ AF03A66E81655E7956ACD17236C3D628
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1647 (266,587 bytes)
Resource Type Count Total Size Percentage
RT_STRING 1620 213,560 bytes
80.1%
RT_RCDATA 26 52,275 bytes
19.6%
RT_VERSION 1 752 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
Product ReShade
Description crosire's ReShade post-processing injector for 64-bit
File Version 6.3.3.1921
Original Name ReShade64.dll
Copyright Copyright © 2014. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware