Gridinsoft Logo
File Icon

The x64.exe (Process Hacker) File Analysis

Updated 1 year ago
Checked by Malware Check
x64.exe

Technical Analysis

File Name x64.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
24576:dj2BGxSuc+vLd2TJjx7JQCqR55uyxrLLlvwCVenmh+0:dj2BGAjed2F17JHqkyHVum
Scanner Version 1.0.148.174
Database Version 2023-11-27 07:01:26 UTC
⚠

Suspicious File Detected

Detected by 26 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
36%
Detection Rate
1,721,888
File Size (bytes)
26/72
Engines Detected
2023-11-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
28a684081baa82b88c15ba9a5196d689
SHA1
14a7a33f8fb21f490d1d135845edbb6820741ef5
SHA256
f76222b90d341b01fd77ebd2769345223de874ee350a5e132d5b3b2c18acfb1c
SHA512
709e0f1ffdb8d00e318a4be88432d8d6fbad1dc8a3f051a52531f4584b85dee9cb6b4d8d245c08cf5393290d38cc0525915036d0be7c109d49366ed93888e2d3
ImpHash
e9303b2a3a410fbe877361a323454acd

Security Engines with Detections (26 of 72)

Elastic
malicious (high confidence) Malicious
DrWeb
Tool.ProcessHacker.4 Malicious
CAT-QuickHeal
HackTool.ProcHacker.P8 Malicious
ALYac
Application.ProcessHacker.1 Malicious
VIPRE
Application.ProcessHacker.1 Malicious
Sangfor
HackTool.Win32.ProcessHacker.uwccg Malicious
K7AntiVirus
Unwanted-Program ( 005447321 ) Malicious
K7GW
Unwanted-Program ( 005447321 ) Malicious
CrowdStrike
win/grayware_confidence_90% (D) Malicious
Symantec
Hacktool.ProcHack!g1 Malicious
Kaspersky
not-a-virus:HEUR:RiskTool.Win32.ProcHack.gen Malicious
BitDefender
Application.ProcessHacker.1 Malicious
Emsisoft
Application.ProcessHacker.1 (B) Malicious
Trapmine
suspicious.low.ml.score Malicious
FireEye
Application.ProcessHacker.1 Malicious
Sophos
Process Hacker (PUA) Malicious
GData
Application.ProcessHacker.1 Malicious
Jiangmin
RiskTool.ProcHack.aa Malicious
Arcabit
Application.ProcessHacker.1 Malicious
SUPERAntiSpyware
PUP.ProcessHacker/Variant Malicious
ZoneAlarm
not-a-virus:HEUR:RiskTool.Win32.ProcHack.gen Malicious
MAX
malware (ai score=72) Malicious
Malwarebytes
Neshta.Virus.FileInfector.DDS Malicious
Yandex
Trojan.Agent!0iCBkv4MmIo Malicious
Fortinet
Riskware/ProcHackTool Malicious
DeepInstinct
MALICIOUS Malicious
46 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 269727acacba789cd7a93601617416ed
Fuzzy: c2b74ba8bb134400487ce1be7b5c9c96
dHash: f8a48686aeb6f3e0
Image Base 0x140000000
Entry Point 0x1400e2754
Compilation Time 2016-02-26 10:11:01
Checksum 0x001a737e (Actual: 0x001a759a)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\Projects\processhacker2\bin\Release64\ProcessHacker.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 12 libraries
Exports 756 functions
Resources 159 Resources
Sections 7 Sections

Digital Signatures

▼
DigiCert High Assurance Code Signing CA-1 Wen Jia Liu (AU)
DigiCert Assured ID CA-1 DigiCert (US)
DigiCert High Assurance EV Root CA DigiCert Inc (US)
DigiCert Assured ID Root CA DigiCert Inc (US)

Version Information

▼
CompanyName wj32
FileDescription Process Hacker
FileVersion 2.38.0.343
InternalName Process Hacker
LegalCopyright Licensed under the GNU GPL, v3.
OriginalFilename ProcessHacker.exe
ProductName Process Hacker
ProductVersion 2.38.0.343
Translation 0x0c09 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,046,016 bytes 1,046,016 bytes 6.43 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6BB11DF1AC1C67BF4DB561DF3E614237
.rdata 0x00101000 332,824 bytes 333,312 bytes 5.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F9E54ADA39046379D553D5EC73D44641
.data 0x00153000 54,672 bytes 27,136 bytes 2.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1DBA8F06F47E5EC7A6EBE5F442610E99
.pdata 0x00161000 48,384 bytes 48,640 bytes 6.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 53A3F8F41E607C7E33130CFD928CA218
.gfids 0x0016d000 216 bytes 512 bytes 2.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6FBE6D800B5CE5CAC2494F0186D77264
.rsrc 0x0016e000 244,712 bytes 244,736 bytes 5.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC3283440D022EC8ABECA1AA1A4980AE
.reloc 0x001aa000 5,464 bytes 5,632 bytes 5.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 003B698716CA9027B087F52BB133360B

Resource Analysis

▼
Total Resources: 159 (236,443 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 11 22 bytes
0%
RT_BITMAP 2 2,128 bytes
0.9%
RT_ICON 45 173,267 bytes
73.3%
RT_MENU 18 7,384 bytes
3.1%
RT_DIALOG 70 50,230 bytes
21.2%
RT_ACCELERATOR 2 216 bytes
0.1%
RT_GROUP_ICON 9 684 bytes
0.3%
RT_VERSION 1 756 bytes
0.3%
RT_MANIFEST 1 1,756 bytes
0.7%

Certificate Chain Analysis

▼
Certificate #1
Subject Wen Jia Liu
Wen Jia Liu
AU
Issuer DigiCert High Assurance Code Signing CA-1
Serial Number 21194619115459756445373572871103017343
Certificate #2
Subject DigiCert Timestamp Responder
DigiCert
US
Issuer DigiCert Assured ID CA-1
Serial Number 3995999952007395326848486153846780006
Certificate #3
Subject DigiCert High Assurance Code Signing CA-1
DigiCert Inc
US
Issuer DigiCert High Assurance EV Root CA
Serial Number 3680403385497920146360574967411527007
Certificate #4
Subject DigiCert Assured ID CA-1
DigiCert Inc
US
Issuer DigiCert Assured ID Root CA
Serial Number 9294069684021802972772960878324333083
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
26 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware