Gridinsoft Logo
File Icon

The GuiKeyXC.exe File Analysis

Updated 3 minutes ago
Checked by Malware Check
GuiKeyXC.exe

Technical Analysis

File Name GuiKeyXC.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-14 17:00:20 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
12,221,017
File Size (bytes)
2025-07-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
93570ba0aaedd54f9687b311e4030628
SHA1
00403b086a92da80448f48e5ef068e5e18122583
SHA256
90d1d13f74e93e23aea82935481879b087cf2461660d03262247000179be6e6b
SHA512
86f9c35d0a8423694d79a9e55a8d7da89565c6d4015dc8be42d0fcf5b12d2d258e9c7ecb6ff71813f5060a23db39ff733b8ad148ad462e12cda6850983a98b5c
ImpHash
064967a99ade726316dc79a4a929fe96

PE Analysis

Basic Information

▼
Icon
Hash: ed60d55676c9938357f965caab12bd88
Fuzzy: 6af117569636f81003b26623038ebd71
dHash: b24d69b2616996e8
Image Base 0x140000000
Entry Point 0x14000c650
Compilation Time 2025-07-04 00:38:30
Checksum 0x00bb635a (Actual: 0x00bb635a)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
USER32, KERNEL32, ADVAPI32
Exports 0 functions
Resources 3 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 179,328 bytes 179,712 bytes 6.49 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C5A51427C9E50EED49066B4F651C9926
.rdata 0x0002d000 77,978 bytes 78,336 bytes 5.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EA0253D662598A8EFB4C022FA6520D4B
.data 0x00041000 20,720 bytes 3,584 bytes 1.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F2C1B519B8666886CE1BD1B9B61F5705
.pdata 0x00047000 9,036 bytes 9,216 bytes 5.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 71EB4320CA0FFDC3F27CD9C262C3B774
.fptable 0x0004a000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0004b000 13,196 bytes 13,312 bytes 7.90 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DDAE6EAA858D0D48B0C323DBC207F3A0
.reloc 0x0004f000 1,896 bytes 2,048 bytes 5.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F96D1D33DEB9DF9BEED33354E5FFB528
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 3 (12,961 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 11,648 bytes
89.9%
RT_GROUP_ICON 1 20 bytes
0.2%
RT_MANIFEST 1 1,293 bytes
10%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware