| File Name | Fate_Grand-Order-(English)_com.aniplex.fategrandorder.en_gameslolc_29546178.exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-01 07:00:32 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
e23d97827ea3c90cd85f2d11402e8940
|
|
| SHA1 |
67c01979b3516f9c3082cc05367142a74e413be8
|
|
| SHA256 |
16f7d9d609c24c5af75c0141059d49008eb9b1f016d198e224bdb486668cc7b5
|
|
| SHA512 |
e9dfd9ebf77aa615b17c05f99a5efed0c5dc993b7ca59800aa7ffa45d0d7fe4e207d0e4386c4fd9b11ceb49b5a4d28b4014ab9d6327ed86a8321cd9f3e90f646
|
|
| ImpHash |
bf4b1c936d7692486b8a0e78543a5411
|
| Icon |
Hash: 8f98f88978b22f8e7c57e5474837b807
Fuzzy: ab63824243d42b220b0dda464995d4d9 dHash: f0cccc8e8696e8e8 |
| Image Base | 0x140000000 |
| Entry Point | 0x14008b3a8 |
| Compilation Time | 2023-10-18 09:16:02 |
| Checksum | 0x003528d3 (Actual: 0x003528d3) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\BuildAgent\work\dbddd2e9dd455b4f\build\x64\release\bin\extractor.pdb |
| Digital Signature | OK |
| Imports |
10 libraries
WS2_32, IPHLPAPI, SHLWAPI, VERSION, gdiplus, KERNEL32, USER32, SHELL32, ole32, WININET |
| Exports | 0 functions |
| Resources | 8 Resources |
| Sections | 7 Sections |
| Comments | |
| CompanyName | |
| FileDescription | |
| FileVersion | 3.87.1.0 |
| InternalName | Downloader.exe |
| LegalCopyright | GamesLOL |
| LegalTrademarks | |
| OriginalFilename | Downloader.exe |
| ProductName | |
| ProductVersion | 3.87.1.0 |
| Assembly Version | 3.87.1.0 |
| Translation | 0x0000 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
783,528 bytes | 783,872 bytes | 6.41 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
EE5813A065C01CB1CF9BAB81F36CA146 |
.rdata |
0x000c1000 |
210,644 bytes | 210,944 bytes | 5.28 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
A02E61C2071F43387CF4B974090F4555 |
.data |
0x000f5000 |
30,856 bytes | 22,016 bytes | 4.29 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B61FFF945A9E1607F69520418DC5F9CC |
.pdata |
0x000fd000 |
34,944 bytes | 35,328 bytes | 5.91 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C699FD3988DED35FE7443BA6B9564F97 |
_RDATA |
0x00106000 |
244 bytes | 512 bytes | 2.44 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
6DD564D037B4FE2564E497CEEEF3F2F6 |
.rsrc |
0x00107000 |
2,344,938 bytes | 2,344,960 bytes | 7.99 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8165DB7B97F52B594A81E8498B68FC59 |
.reloc |
0x00344000 |
5,888 bytes | 6,144 bytes | 5.38 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
B61A583941CD7B0DDEAF2AD5674AE1A7 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 1 | 55,962 bytes | |
| RT_STRING | 1 | 208 bytes | |
| RT_RCDATA | 3 | 2,287,078 bytes | |
| RT_GROUP_ICON | 1 | 20 bytes | |
| RT_VERSION | 1 | 748 bytes | |
| RT_MANIFEST | 1 | 346 bytes |
| File Version | 3.87.1.0 |
| Original Name | Downloader.exe |
| Signing Date | 09:19 AM 11/16/2023 (786 days ago) |
| Verification Status | Signed |
| Signers | AI MEDIA LIMITED; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45 |
| Counter Signers | DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert |
| Internal Name | Downloader.exe |
| Copyright | GamesLOL |
77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED0F 27 BD 64 C4 82 A3 A5 6B D4 DC D205 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 1607 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!