Gridinsoft Logo
File Icon

The Lunar Client - Installer.exe File Analysis

Updated 29 minutes ago
Checked by Malware Check
Lunar Client - Installer.exe

Technical Analysis

File Name Lunar Client - Installer.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version 1.0.259.174
Database Version 2026-11-07 21:07:02 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,246,272
File Size (bytes)
2026-11-07
Analysis Date

Scan Another File

The uploaded file itself is not retained or shared with third parties. File names, hashes, and analysis results may appear in public reports. For confidential material, contact Support before uploading. How we use your data.

File Identification

Hash Type Value Action
MD5
c246ff5768c41a60f0d70e225b068574
SHA1
db8549ad8d6917a3db237febca8f3b5d3491d8f4
SHA256
bd6cec3e38b69e41f8ad578b5953561c6ec6fcf9f6853b3699a0e2b960e664dc
SHA512
e7dfb843d7f50c9f1f238c3e569e532b6b736586842acdfac9651caa9e37c15760c14b98ff9133285719ba6b708c6032a003c1c495ba47662122685a7bf91d6f
ImpHash
56a78d55f3f7af51443e58e0ce2fb5f6

PE Analysis

Basic Information

▼
Icon
Hash: 99129fabd67955b32f4b69723c0eae9d
Fuzzy: 903148184ac3369ac3f6dcf45d09449f
dHash: 0c33c8d898f0f00e
Image Base 0x00400000
Entry Point 0x0040352d
Compilation Time 2021-09-25 21:57:46
Checksum 0x0031a48c (Actual: 0x00322e2f)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 12 Resources
Sections 5 Sections

Version Information

▼
Comments
CompanyName Overwolf Ltd.
FileDescription Lunar Client
FileVersion 2.316.1.1
LegalCopyright Copyright (C) 2021 Overwolf Ltd. All Rights Reserved.
LegalTrademarks
ProductName Lunar Client
ProductVersion 2.316.1.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,775 bytes 27,136 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CE9DF19DF15AA7BFBC0A8D0AF0B841D0
.rdata 0x00008000 5,286 bytes 5,632 bytes 5.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A118375C929D970903C1204233B7583D
.data 0x0000a000 176,152 bytes 1,536 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 82A10C59A8679BB952FC8316070B8A6C
.ndata 0x00036000 135,168 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00057000 155,568 bytes 155,648 bytes 6.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DDB0C8DEA2708B90D792EDE26FD2D201

Resource Analysis

▼
Total Resources: 12 (154,833 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 152,545 bytes
98.5%
RT_DIALOG 3 636 bytes
0.4%
RT_GROUP_ICON 1 90 bytes
0.1%
RT_VERSION 1 732 bytes
0.5%
RT_MANIFEST 1 830 bytes
0.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. 1
    Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
  2. 2
    Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
  3. 3
    Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
  4. 4
    Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
This file looks clean right now, but that doesn't mean you should let your guard down. New malware appears daily, and even legit files can be compromised after download. When in doubt, verify the source and check for a digital signature.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Portal
Signed in via Gridinsoft Portal · View profile
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware