xblive.exe

Microsoft Windows Operating System

Huang Liyun

It runs as a windows Service named “Xbox Live Network Manager Service”.
Publisher:
Microsoft Corporation  (signed by Huang Liyun)

Product:
Microsoft Windows Operating System

Description:
Microsoft XBox Live

Version:
6.3.9600.17284 (aaa.140822-1915)

MD5:
cc4c2e52a61179af218c73c35168724b

SHA-1:
3b38d59c2641a2ba62b5a6f1d6db77396e27f0d3

SHA-256:
3069a9eb9a55d8be3a8486c7e2268a97e89f68455ad86bd4185cd03b6218161d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:16:54 PM UTC  (today)

File size:
6 MB (6,341,560 bytes)

Product version:
xbox 4.0

Copyright:
Microsoft Corporation. All rights reserved.

Original file name:
xbox.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\xbox\xblive.exe

Digital Signature
Signed by:

Authority:
WoSign CA Limited

Valid from:
5/10/2016 3:52:17 AM

Valid to:
5/10/2017 3:52:17 AM

Subject:
CN=Huang Liyun, L=Tangshan, S=Hebei, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
1A1C8242C0D3B3F640B48C854D2D3273

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
3.0

Entry address:
0x5E820

Entry point:
48, 8D, 74, 24, 08, 48, 8B, 3C, 24, 48, 8D, 05, 10, 00, 00, 00, FF, E0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 48, 8D, 05, 89, C5, FF, FF, FF, E0, 00, 00, 00, 00, 00, 00, 00, 51, 48, 8B, 01, 48, 8B, 71, 10, 48, 8B, 49, 08, 65, 48, 8B, 3C, 25, 30, 00, 00, 00, C7, 47, 68, 00, 00, 00, 00, 48, 81, EC, 80, 00, 00, 00, 83, F9, 04, 7E, 11, 83, F9, 10, 7E, 02, CD, 03, 48, 89, E7, FC, F3, 48, A5, 48, 89, E6, 48, 8B, 0E, 48, 8B, 56, 08, 4C, 8B, 46, 10, 4C, 8B, 4E, 18, FF, D0, 48, 81, C4, 80, 00, 00...
 
[+]

Code size:
5.9 MB (6,215,680 bytes)

Service
Display name:
Xbox Live Network Manager Service

Service name:
XBox

Description:
Xbox Live Network Service

Type:
Win32OwnProcess, InteractiveProcess


Scan xblive.exe - Powered by Reason Core Security