Gridinsoft Logo
File Icon

The RDR2.exe (Red Dead Redemption 2) File Analysis

Updated 2 hours ago
Checked by Malware Check
RDR2.exe

Technical Analysis

File Name RDR2.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.258.174
Database Version 2026-10-21 18:07:03 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
89,562,608
File Size (bytes)
2026-10-21
Analysis Date

Scan Another File

The uploaded file itself is not retained or shared with third parties. File names, hashes, and analysis results may appear in public reports. For confidential material, contact Support before uploading. How we use your data.

File Identification

Hash Type Value Action
MD5
eff7c1a603b5327a0f1b8d823f86eb2e
SHA1
45d5f0633f22a04216fff9847c6688f0e4db2293
SHA256
9b8b8454616a6ef91c8d5655b231e5cd21aa2236ab8cb04c34fce09248a55fdc
SHA512
d366a4886b0744fc1ae3d3a120f931eff42540754deaae987617f600eed6c154b07358a0d3e5f41ea61046dfda361edf5aefd85169af384fd330b8a21926e94d
ImpHash
a52e60f100ccbf68c9d36d1dc5e4bac7

PE Analysis

Basic Information

▼
Icon
Hash: 763699f289ac76f32ef2bd4e2b6cac55
Fuzzy: 6ffd328e1799145775967de881a70d43
dHash: 883a54d6da2a8b86
Image Base 0x140000000
Entry Point 0x142e4fc44
Compilation Time 2024-03-11 09:04:46
Checksum 0x05576f9c (Actual: 0x055774fc)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path X:\rdr3\dlc\titleupdate\build\dev_live\game_win64_master.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 34 libraries
Exports 38 functions
Resources 40 Resources
Sections 11 Sections

Version Information

▼
CompanyName Rockstar Games
FileDescription Red Dead Redemption 2
FileVersion 1.0.1491.50
InternalName RDR2.exe
LegalCopyright Rockstar Games Inc. (C) 2005-2024 Take Two Interactive. All rights reserved.
OriginalFilename RDR2.exe
ProductName Red Dead Redemption 2
ProductVersion 1.0.1491.50
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 53,309,440 bytes 53,309,440 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 88E2466A32FFE852CA4FE98EA846D003
.rdata 0x032d8000 6,546,432 bytes 6,546,432 bytes 5.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 683E521720D91601CE76412DCE8285F5
.data 0x03917000 37,332,728 bytes 5,698,048 bytes 3.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CE56F9B650D88B98FAAE2318819400C7
.pdata 0x05cb2000 2,301,440 bytes 2,301,440 bytes 6.79 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 537497DE4BAAD2E9F668A078F7801045
.msvcjmc 0x05ee4000 512 bytes 512 bytes 1.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D1D2E34FB8A1173E672C0E5C3FF864BC
_RDATA 0x05ee5000 40,960 bytes 40,960 bytes 7.27 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E1AF7B42ADF118855777EFD9C32E09DA
CPADinfo 0x05eef000 512 bytes 512 bytes 7.27 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EB372C946E342A92BAEC3FAB42CAB52D
.rsrc 0x05ef0000 399,360 bytes 399,360 bytes 7.77 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7917CDA1A0DD58EC511A9B897F790927
.reloc 0x05f52000 900,608 bytes 900,608 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CA4F2F32DCF8921C9D78614CF54ABE87
.idata 0x0602e000 19,456 bytes 19,456 bytes 4.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A82F2542FF023C542754CE5CC4044481
.text 0x06033000 20,334,080 bytes 20,334,080 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 62EF150F98A827B5C5764DD3723BB770
Entropy Analysis Alert

3 section(s) with high entropy (≥7.5) detected - possible packing/encryption

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 40 (397,339 bytes)
Resource Type Count Total Size Percentage
RT_ICON 24 390,504 bytes
98.3%
RT_STRING 13 3,466 bytes
0.9%
RT_GROUP_ICON 1 342 bytes
0.1%
RT_VERSION 1 864 bytes
0.2%
RT_MANIFEST 1 2,163 bytes
0.5%

Certificate Chain Analysis

▼
Certificate Information
Product Red Dead Redemption 2
Description Red Dead Redemption 2
File Version 1.0.1491.50
Original Name RDR2.exe
Signing Date 09:55 AM 03/11/2024 (954 days ago)
Verification Status The digital signature of the object did not verify.
Signers Rockstar Games, Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name RDR2.exe
Copyright Rockstar Games Inc. (C) 2005-2024 Take Two Interactive. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2023 #4 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
Rockstar Games, Inc. #5 Chain
Validity Period: 2023-01-18 00:00:00 → 2026-01-20 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D 88 C0 8F 56 6D 2B 1F 0C 19 4D B1 F8 CA C9 A9

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware