Gridinsoft Logo
File Icon

The eldenring.exe (ELDEN RINGā„¢) File Analysis

Updated 3 months ago
Checked by Malaware Check
eldenring.exe

Technical Analysis

File Name eldenring.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.209.174
Database Version 2025-03-02 22:00:36 UTC
āœ“

Clean File

No threats detected by our scanner

0%
Detection Rate
84,845,832
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ed2fd82f95bd11c9b79ef56bac80d221
SHA1
1243d6321754ec8d9bd1660d8082a3c772ea4e36
SHA256
86a570fc04c7a1edf085a53bb5c0806aacf5133b815530c5346c1d7dc0955bc0
SHA512
0237fd443268744290bf75134a1076cf080ed516e9f62f87a8a7c40f403286ec4586b901241477ba04dee46ee35b8084516df5d91507576988d19dd227055ff5
ImpHash
b9f322b093e8fc6002f884b46d1a1c1e

PE Analysis

Basic Information

ā–¼
Icon
Hash: 2fa85525c42d9d403e87c2063f3bf326
Fuzzy: 484d0c75a5e452a1b8b725dbf8d98a27
dHash: 31b270f0f0f060c4
Image Base 0x140000000
Entry Point 0x1424b5230
Compilation Time 2023-06-19 06:35:50
Checksum 0x050eed07 (Actual: 0x050eed07)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path W:\GR\Patch110\Source\GR\Title\Project\vs2015\dist_win64_d3d12\MasterLTO_SteamWW\GR_win64_MasterLTO_SteamWW_d3d12.pdb
Digital Signature OK
Imports 22 libraries
Exports 560 functions
Resources 11 Resources
Sections 11 Sections

Version Information

ā–¼
CompanyName FromSoftware, Inc.
FileDescription ELDEN RINGā„¢
FileVersion 2.0.0.0
InternalName ELDEN RINGā„¢
LegalCopyright ELDEN RINGā„¢ & Ā©2022 BANDAI NAMCO Entertainment Inc. / Ā©2022 FromSoftware, Inc.
ProductName ELDEN RINGā„¢
ProductVersion 2.0.0.0
Translation 0x0409 0x04b0

PE Sections

ā–¼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 43,327,488 bytes 43,327,488 bytes 6.58 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C3A0895BB2FAA7C5813EA3FC40F322AC
.interpr 0x02953000 49,152 bytes 49,152 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6007F373FB6C3371313C226A12C69442
.rdata 0x0295f000 18,099,200 bytes 18,099,200 bytes 5.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1C7B692A5DCB94665596CD39ED64B13E
.data 0x03aa2000 11,631,604 bytes 2,292,736 bytes 4.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 807479FB577DA6B04816C00B0A5745D1
.pdata 0x045ba000 2,812,416 bytes 2,812,416 bytes 7.13 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BAF6F9533131B5026CDD062D4793C5E3
.tls 0x04869000 512 bytes 512 bytes 5.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 73BCC08F5E03A7FA335D1C7C29B7F647
.gfids 0x0486a000 4,608 bytes 4,608 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CBA26290D3C63C87F789FEED1A8D84C2
.rsrc 0x0486c000 220,160 bytes 220,160 bytes 7.43 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BE45D1B4188559C2A78A80E24FE515E5
.reloc 0x048a2000 758,784 bytes 758,784 bytes 5.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 85573E02152253991A4C9AB0BE66F2AA
.idata 0x0495c000 16,896 bytes 16,896 bytes 4.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0C982EB1D41FD248104104727CF9B80F
.text 0x04961000 17,252,352 bytes 17,252,352 bytes 7.43 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 50FA624C32162918ABCB182E3FB6B4EC
Entropy Analysis Alert

4 section(s) with elevated entropy (ā‰„6.5) - possible compression

Resource Analysis

ā–¼
Total Resources: 11 (219,334 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 4,268 bytes
1.9%
RT_ICON 6 213,811 bytes
97.5%
RT_GROUP_CURSOR 1 20 bytes
0%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 764 bytes
0.3%
RT_MANIFEST 1 381 bytes
0.2%

Certificate Chain Analysis

ā–¼
Certificate Information
Product ELDEN RINGā„¢
Description ELDEN RINGā„¢
File Version 2.0.0.0
Signing Date 08:08 AM 07/11/2023 (697 days ago)
Verification Status Signed
Signers FromSoftware,Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name ELDEN RINGā„¢
Copyright ELDEN RINGā„¢ & Ā©2022 BANDAI NAMCO Entertainment Inc. / Ā©2022 FromSoftware, Inc.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 ā†’ 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 ā†’ 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 ā†’ 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2022 - 2 #4 Chain
Validity Period: 2022-09-21 00:00:00 ā†’ 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
FromSoftware,Inc. #5 Chain
Validity Period: 2021-08-18 00:00:00 ā†’ 2023-08-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B 62 C5 42 98 61 B8 1A 63 92 04 E7 10 83 EB 75

āœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware