The hxe exe (A HCE wrapper and SPV3 loader) Yu:Miris File Malware Analysis

The hxe.exe (A HCE wrapper and SPV3 loader) File Analysis

Updated 1 month ago

Checked by Malaware Check

hxe.exe

Hash Type	Value	Action
MD5	7ed6de783b1155606e7bb67073fd46de
SHA1	cda6821742cc38c7b751235952edef15125b99cb
SHA256	b09dbb7743cf1170f6ec9b593f4ef10dc22907db647d99998b6a2462eba19c3e
SHA512	ccfc4f2c87bb91a4192f390e7794762bbc7fa0f49871d55994c9f8ebe65bf7af6461968cbef0d839cfbbf6c18775651027d3ed3d2641fad0abca742f2c1487d9

Hash Type

Value

Action

MD5

7ed6de783b1155606e7bb67073fd46de

SHA1

cda6821742cc38c7b751235952edef15125b99cb

SHA256

b09dbb7743cf1170f6ec9b593f4ef10dc22907db647d99998b6a2462eba19c3e

SHA512

ccfc4f2c87bb91a4192f390e7794762bbc7fa0f49871d55994c9f8ebe65bf7af6461968cbef0d839cfbbf6c18775651027d3ed3d2641fad0abca742f2c1487d9

PE Analysis

Basic Information

▼

Icon	Hash: 3b90a50aadd547a80a0df35a008cbd39 Fuzzy: 8a2920266995896291a4f7e51a765ea4 dHash: f0b0f2f2b6a66933
Image Base	`0x140000000`
Entry Point	`0x140000000`
Compilation Time	2021-02-13 16:50:45
Checksum	0x00000000 (Actual: 0x0004385b)
OS Version	4.0
PEiD Signatures	`PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows`
PDB Path	`X:\HCE\hxe\kernel\src\obj\Release\hxe.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	0
Exports	0 functions
Resources	15 Resources
Sections	2 Sections

Version Information

▼

Translation	0x0000 0x04b0
Comments	A HCE wrapper and SPV3 loader
CompanyName	Yu:Miris
FileDescription	A HCE wrapper and SPV3 loader
FileVersion	1.0.0.0
InternalName	hxe.exe
LegalCopyright	Copyright © 2019 Emilian Roman
LegalTrademarks
OriginalFilename	hxe.exe
ProductName	HXE
ProductVersion	1.0.0.0
Assembly Version	1.0.0.0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00002000`	189,740 bytes	189,952 bytes	5.93 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`88EFFE51C99E656DDF45A416BFB1776A`
`.rsrc`	`0x00032000`	31,108 bytes	31,232 bytes	6.67 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`F82D1CDAC7E6BF5D2EB2BC00BAD26A90`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 15 (30,268 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	12	28,704 bytes	94.8%
RT_GROUP_ICON	1	174 bytes	0.6%
RT_VERSION	1	900 bytes	3%
RT_MANIFEST	1	490 bytes	1.6%

Certificate Chain Analysis

▼

Certificate Information

Product	HXE
Description	A HCE wrapper and SPV3 loader
File Version	1.0.0.0
Original Name	hxe.exe
Internal Name	hxe.exe
Copyright	Copyright © 2019 Emilian Roman

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

File Name	hxe.exe
File Type	PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-05 02:00:12 UTC

The hxe.exe (A HCE wrapper and SPV3 loader) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification