The MelonLoader.Installer.exe (MelonLoader.Installer) File Analysis

Updated 3 hours ago

Checked by Malware Check

MelonLoader.Installer.exe

Technical Analysis

File Name	MelonLoader.Installer.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.234.174
Database Version	2026-01-17 18:00:16 UTC

✓

Clean File

No threats detected by our scanner

Detection Rate

22,349,553

File Size (bytes)

2026-01-17

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	96761fefc151688378c4200a8fc844a7
SHA1	d5257a89c4158d1d815bb47111eb544fe6b669d2
SHA256	25430ea2cc01781ea0e45c1a3ef5de4c60d04aea4043d5639be85fb589cf9449
SHA512	126e95416f0df25d523a3a018ab6f0ecafc68332df06d5a39c1d326e9b89048c6a1a38b7ff65c9c16ee481aa7ce8a59b587a4d56ae6ea0281f6c744f6127ac44
ImpHash	8d0884146416cfc82b5a110c74a34ea5

PE Analysis

Basic Information

▼

Icon	Hash: 427a619955fff8930c6a1f9814274a2b Fuzzy: a739637fdfc4ebf74549e421a4db167e dHash: 40988228b8c67031
Image Base	`0x140000000`
Entry Point	`0x1405eaf20`
Compilation Time	2025-09-25 19:30:18
Checksum	0x00000000 (Actual: 0x0155d0ac)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	17 libraries
Exports	6 functions
Resources	12 Resources
Sections	9 Sections

Version Information

▼

Translation	0x0000 0x04b0
CompanyName	discord.gg/2Wn3N2P
FileDescription	MelonLoader.Installer
FileVersion	4.2.1.0
InternalName	MelonLoader.Installer.dll
LegalCopyright
OriginalFilename	MelonLoader.Installer.dll
ProductName	MelonLoader.Installer
ProductVersion	4.2.1+201f0da25ae5e576884f65c350046d7bb267b513
Assembly Version	4.2.1.0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	6,579,532 bytes	6,579,712 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BDF8A55C6A637E0190C0934551DF7D80`
`.CLR_UEF`	`0x00648000`	215 bytes	512 bytes	3.10 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E8622C2F343B5DC90B783A53327E8735`
`.rdata`	`0x00649000`	1,608,926 bytes	1,609,216 bytes	5.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3CC32F8A0DCC9442CCB4E4D4F44F482E`
`.data`	`0x007d2000`	106,984 bytes	24,576 bytes	2.92 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C301B90144C52C0E28E936AFC5D1DAD4`
`.pdata`	`0x007ed000`	230,988 bytes	231,424 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`45C021146009866ECBCA26E379A67628`
`.didat`	`0x00826000`	56 bytes	512 bytes	0.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`33294C07FCE879E3B8C910B47E0E443C`
`Section`	`0x00827000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x00828000`	1,522,508 bytes	1,522,688 bytes	6.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8A4F7BB41B6ECFF774924316443D1883`
`.reloc`	`0x0099c000`	31,716 bytes	31,744 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`B3D7BE5066CA7F489EFD754F99DAB0C4`

Resource Analysis

▼

Total Resources: 12 (1,521,641 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	157,599 bytes	10.4%
RT_RCDATA	3	1,362,384 bytes	89.5%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	904 bytes	0.1%
RT_MANIFEST	1	664 bytes	0%

Certificate Chain Analysis

▼

Certificate Information

Product	MelonLoader.Installer
Description	MelonLoader.Installer
File Version	4.2.1.0
Original Name	MelonLoader.Installer.dll
Internal Name	MelonLoader.Installer.dll

Certificate Chain Summary

Microsoft Windows Code Signing PCA 2024 #1 Primary

Validity Period: 2024-08-08 21:36:23 → 2035-06-23 22:04:01

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 1C 48 9F 81 DF A1 B0 B7 77 00 00 00 00 00 1C

.NET DAC #2 Chain

Validity Period: 2025-05-08 18:23:58 → 2026-05-06 18:23:58

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 5C 91 BA DE E1 AF F7 5E 70 00 00 00 00 00 5C

Microsoft Time-Stamp Service #3 Chain

Validity Period: 2024-07-25 18:31:18 → 2025-10-22 18:31:18

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 01 FE D0 A8 C2 7B 34 21 0B 01 00 01 00 00 01 FE

Microsoft Time-Stamp PCA 2010 #4 Chain

Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now