Gridinsoft Logo
File Icon

The LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe (LDPlayer) File Analysis

Updated 1 hour ago
Checked by Malware Check
LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe

Technical Analysis

File Name LDPlayer9_ens_com.robtopx.geometryjump_25567197_ld.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.250.174
Database Version 2026-07-23 12:00:31 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,527,656
File Size (bytes)
2026-07-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c329a16ec3b4832e67ad84d6f6742d32
SHA1
0e91bebf54cb532293cc35cbec1ce41d35aaaed6
SHA256
8514265546d0df203b0dbf8b6b68d3b699fe6efe2d671638daee94de07b0816b
SHA512
5619569744565ab0c3ccd627370eaebfcc274d414bbff10296b9af737fa91d20585d529ef9e16426be90402abe9fdd402ab0fc922d5c3ad341f98d98b0e36d8e
ImpHash
e26c04db2a445bfb3dc91414bfffdaef

PE Analysis

Basic Information

▼
Icon
Hash: 599a415fd7a574e66037cf98b463ffe6
Fuzzy: 2fe91f14ee795204f060e0165ec26e43
dHash: f0cc96b2b29acaf0
Image Base 0x00400000
Entry Point 0x0057aa7d
Compilation Time 2026-05-26 03:34:32
Checksum 0x0035e526 (Actual: 0x0035e526)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\work\downloader_en_多线程9\xzdownloader\bin\xzdownloader.pdb
Digital Signature OK
Imports 18 libraries
Exports 0 functions
Resources 24 Resources
Sections 6 Sections

Version Information

▼
CompanyName LDPlayer
FileDescription LDPlayer
FileVersion 1.0.0.6
InternalName LDPlayer
LegalCopyright Copyright © 2016-2026 JUST OKAY LIMITED. All rights reserved.
OriginalFilename LDPlayer
ProductName LDPlayer
ProductVersion 1.0.0.6
Translation 0x0009 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,166,227 bytes 2,166,272 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C40248D0EE07343D6E636E9971549934
.rdata 0x00212000 487,356 bytes 487,424 bytes 5.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0CB755F79E4A4F81A9AA85F57C23287B
.data 0x00289000 92,000 bytes 40,448 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF9744B1E4D316B82FAD81104D1A154F
.fptable 0x002a0000 128 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x002a1000 710,816 bytes 711,168 bytes 7.85 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4F29FCED0017C499B0AAC5D2B15B6578
.reloc 0x0034f000 99,520 bytes 99,840 bytes 6.59 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C9DE9E29B457E6A929F382CA2FA9666B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 24 (709,419 bytes)
Resource Type Count Total Size Percentage
ZIPRES 2 581,518 bytes
82%
RT_ICON 16 126,162 bytes
17.8%
RT_STRING 1 80 bytes
0%
RT_ACCELERATOR 1 16 bytes
0%
RT_GROUP_ICON 2 236 bytes
0%
RT_VERSION 1 756 bytes
0.1%
RT_MANIFEST 1 651 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product LDPlayer
Description LDPlayer
File Version 1.0.0.6
Original Name LDPlayer
Signing Date 03:36 AM 05/26/2026 (58 days ago)
Verification Status Signed
Signers JUST OKAY LIMITED; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name LDPlayer
Copyright Copyright © 2016-2026 JUST OKAY LIMITED. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #4 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
JUST OKAY LIMITED #5 Chain
Validity Period: 2025-11-13 00:00:00 → 2026-12-18 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 09 74 28 8F AD 05 A2 88 A7 CA 76 C2 04 46 69 6F

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware