| File Name | XboxChecker.exe |
| File Type |
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
|
| Scanner Version | 1.0.226.174 |
| Database Version | 2025-10-05 04:00:29 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
edeebab0617b76066ff991a220441464
|
|
| SHA1 |
11e05fc95389a8c210d1c82d40718c1162759111
|
|
| SHA256 |
da3f2da2e5329a02a9049cd2425d7c2a0b8cb074932ba1bddb4571b6c4805cc5
|
|
| SHA512 |
8c8b908675843a95a54239ccc6a87f6a9f4b70f7640867ed4b8e6af146ef6b41e0308d2df0706771ee6b3f31466c4577913f08741316dd52357cad29381966cd
|
|
| ImpHash |
9cbefe68f395e67356e2a5d8d1b285c0
|
| Image Base | 0x00400000 |
| Entry Point | 0x00466700 |
| Compilation Time | 1970-01-01 00:00:00 |
| Checksum | 0x00000000 (Actual: 0x006d05b7) |
| OS Version | 6.1 |
| PEiD Signatures |
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports |
1 libraries
kernel32 |
| Exports | 0 functions |
| Resources | 0 Resources |
| Sections | 13 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
2,402,744 bytes | 2,402,816 bytes | 6.15 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
2020BC7905AAF4A320291BF1074D14C5 |
.rdata |
0x0024c000 |
2,285,680 bytes | 2,286,080 bytes | 5.66 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
7736F8BCD87C48CBC0D8705C9FF232E5 |
.data |
0x0047b000 |
633,192 bytes | 243,200 bytes | 5.35 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
843FC32748B1936785D39C631C1A09B1 |
/4 |
0x00516000 |
295 bytes | 512 bytes | 5.10 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
43DC7A0AE5A7067502907DB800396667 |
/19 |
0x00517000 |
397,175 bytes | 397,312 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
FFBB96C51ECD240BBB7495FF67550B98 |
/32 |
0x00578000 |
79,003 bytes | 79,360 bytes | 7.94 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
779FE7DCBAF13FE4E9C32FCC76DBA953 |
/46 |
0x0058c000 |
48 bytes | 512 bytes | 0.86 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
40CCA7C46FC713B4F088E5D440CA7931 |
/65 |
0x0058d000 |
661,480 bytes | 661,504 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
E71826E48DC83D477E50D888A3901C10 |
/78 |
0x0062f000 |
536,543 bytes | 536,576 bytes | 7.99 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
20D7D022DB1AB1C61982AFAC27E78A0C |
/90 |
0x006b2000 |
134,563 bytes | 134,656 bytes | 7.81 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES
|
3511D3468219152F5B1A74D39AE96098 |
.idata |
0x006d3000 |
1,148 bytes | 1,536 bytes | 3.54 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D38F73FF9F5785553FCA721C05CD7FE5 |
.reloc |
0x006d4000 |
38,540 bytes | 38,912 bytes | 5.43 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
0D422FE77A7C1D793187A9135B846A10 |
.symtab |
0x006de000 |
321,043 bytes | 321,536 bytes | 5.35 (Normal) |
IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8A9E3939A4BBE07023CF2D80271BD1F3 |
5 section(s) with high entropy (≥7.5) detected - possible packing/encryption
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!