Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

3398a 7.69%
08921 15.38%
02509 23.08%
26724 7.69%
bddf1 30.77%
85b15 7.69%
02e31 7.69%
(Note, Garena Online Pte Ltd publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
kernel32.dll
TlsGetValue, GetCurrentProcessId, OpenEventA, ResetEvent, TlsSetValue, ResumeThread, GetTickCount, SystemTimeToFileTime, SetWaitableTimer, CreateWaitableTimerA, RemoveDirectoryW, DeleteFileW, CreateFileW, GetFullPathNameW, SetEndOfFile, SetFilePointerEx, FindFirstFileW, FindClose, FindNextFileW, DeviceIoControl, GetFileAttributesW, CreateDirectoryExW, CopyFileW, GetCurrentDirectoryW, WideCharToMultiByte, GetProcessHeap, WaitForMultipleObjects, ReleaseSemaphore, HeapAlloc, CreateEventA, CloseHandle, HeapFree, CreateSemaphoreA, WaitForSingleObject, SetEvent, GetSystemTimeAsFileTime, MultiByteToWideChar, Sleep, InterlockedIncrement, InterlockedDecrement, DuplicateHandle, GetCurrentProcess, LeaveCriticalSection, InterlockedExchange, GetLastError, EnterCriticalSection, InterlockedExchangeAdd, PostQueuedCompletionStatus, TlsAlloc, TlsFree, InitializeCriticalSection, DeleteCriticalSection, SetCurrentDirectoryW, GetFileInformationByHandle, GetFileAttributesExW, GetFileTime, SetFileTime, MoveFileExW, GetDiskFreeSpaceExW, CreateDirectoryW, SetLastError, GetTempPathW, GetProcAddress, GetModuleHandleA, AreFileApisANSI, LocalFree, FormatMessageA, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DisableThreadLibraryCalls, QueryPerformanceCounter, GetCurrentThreadId, GetSystemInfo
libcurl.dll
curl_easy_perform, curl_easy_cleanup, curl_easy_getinfo, curl_easy_init, curl_easy_setopt
libzmq.dll
zmq_term, zmq_setsockopt, zmq_recv, zmq_msg_close, zmq_socket, zmq_strerror, zmq_msg_data, zmq_init, zmq_msg_size, zmq_errno, zmq_close, zmq_bind, zmq_send, zmq_msg_init, zmq_poll, zmq_connect, zmq_msg_init_size
msvcp90.dll
DllMain
msvcr90.dll
DllMain

filesender.dll

By Garena Online Pte Ltd (Signed)

Remove filesender.dll
MD5:   089219f12aadb3ef849ff3225debeb0f
SHA1:   70aaba63dd337d651823c042414a2804f5903c2a

Overview

filesender.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Garena Online Pte Ltd which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:filesender.dll
Typical file path:C:\Program Files\garena plus\lib\delay_load\filesender.dll
Size:1.47 MB (1,543,984 bytes)
Certificate
Issued to:Garena Online Pte Ltd
Authority (CA):VeriSign
Expiration date:Friday, March 11, 2557
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 38.46%
Microsoft Windows XP 38.46%
Windows 8 15.38%
Windows 7 Home Premium 7.69%

Distribution by countryDistribution by country

Taiwan installs about 30.77% of filesender.dll.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 23.08%
GIGABYTE 23.08%
Hewlett-Packard 15.38%
ASUS 15.38%
Toshiba 15.38%
American Megatrends 7.69%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE