The Wolfenstein The Old Blood v1.0 Plus 12 Trainer.exe (FLiNG@3DMGAME Presents - Wolfenstein The Old Blood v1.0 Plus 12 Trainer) File Analysis

Updated 2 months ago

Checked by Malaware Check

Wolfenstein The Old Blood v1.0 Plus 12 Trainer.exe

Technical Analysis

File Name	Wolfenstein The Old Blood v1.0 Plus 12 Trainer.exe
File Type	Win32 EXE
Magic Bytes	`PE32+ executable for MS Windows (GUI) Mono/.Net assembly`
SSDEEP Hash	24576:cCBwt/+h+ISTKbnTZmo53sBa/12sJXiWDDS:cCBwYh+jezTZme8BcxJXX
Scanner Version	1.0.210.174
Database Version	2025-03-17 01:01:08 UTC

⚠

Suspicious File Detected

Detected by 10 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

14%

Detection Rate

902,656

File Size (bytes)

10/71

Engines Detected

2025-03-17

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	f6e0b2627d0aa7113271790861edbce5
SHA1	9c3b9f2c42e91929f8b9523a99cc5c17fbefb9a0
SHA256	0d1b13d48284a4a7508da0e2de234a4413a3f393148cf4131a862478e452f7ec
SHA512	bd7d799f913de228bffcaf2c36cebdaf5a5a999849fa9a01ff291897f663635e2843b206c08b52f8894a9ff119375128020c4eff6e2432a93f3126470bdc9d22
ImpHash	bcc60d4a5d2e0f46662fc6fb6db1a6f5

Security Engines with Detections (10 of 71)

Cylance

Unsafe Malicious

K7AntiVirus

Unwanted-Program ( 004f3e7f1 ) Malicious

K7GW

Unwanted-Program ( 004f3e7f1 ) Malicious

Cyren

W64/3DMGAMETrainer.B.gen!Eldorado Malicious

ESET-NOD32

a variant of Win64/GameHack.I potentially unsafe Malicious

Sophos

3DMGAME Trainer (PUA) Malicious

McAfee-GW-Edition

BehavesLike.Win64.CoinMiner.cc Malicious

Google

Detected Malicious

Yandex

Trojan.GenAsa!B54rvgceEqo Malicious

CrowdStrike

win/grayware_confidence_70% (D) Malicious

61 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 0ba2d793e22fa06db80e1e35d71acfad Fuzzy: c006c3aa0e4b6640c9b325e553adba39 dHash: 70f8fcfafeaeaaf0
Image Base	`0x140000000`
Entry Point	`0x14003a918`
Compilation Time	2015-05-08 08:21:00
Checksum	0x000e038f (Actual: 0x000e038f)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`N:\PRO\_FLiNGTrainerIV\x64\Release\FLiNGTrainerIV.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	10 libraries KERNEL32, USER32, GDI32, SHELL32, ole32, gdiplus, WINMM, COMCTL32, VERSION, PSAPI
Exports	0 functions
Resources	38 Resources
Sections	6 Sections

Version Information

▼

CompanyName	3DMGAME
FileDescription	FLiNG@3DMGAME Presents - Wolfenstein The Old Blood v1.0 Plus 12 Trainer
FileVersion	1.0.0.0
InternalName	Wolfenstein The Old Blood v1.0 Plus 12 Trainer
LegalCopyright	风灵月影 (FLiNG@3DMGAME) Copyright (C) 2015
OriginalFilename	Wolfenstein The Old Blood v1.0 Plus 12 Trainer.exe
ProductName	Wolfenstein The Old Blood v1.0 Plus 12 Trainer
ProductVersion	1.0.303.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	330,770 bytes	331,264 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8082B5DC2D0EDC6E26D62356FE521BDA`
`.rdata`	`0x00052000`	91,864 bytes	92,160 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D8FA88AEF70004F8647E3FC13C3020E1`
`.data`	`0x00069000`	23,792 bytes	11,776 bytes	3.99 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`14466C2399475AB3CF6BDA6AF69D8383`
`.pdata`	`0x0006f000`	13,536 bytes	13,824 bytes	5.59 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`590B852913EF87FB942F0985854DF64F`
`.rsrc`	`0x00073000`	447,676 bytes	448,000 bytes	7.81 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`0401058491499541C58DC65EC6F80323`
`.reloc`	`0x000e1000`	4,542 bytes	4,608 bytes	3.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`77CE53C9C271A67B9447B70EE81F900E`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 38 (445,571 bytes)

Resource Type	Count	Total Size	Percentage
MID	1	32,445 bytes	7.3%
PNG	21	276,578 bytes	62.1%
WAVE	2	22,222 bytes	5%
RT_ICON	9	112,476 bytes	25.2%
RT_ACCELERATOR	1	16 bytes	0%
RT_GROUP_ICON	2	138 bytes	0%
RT_VERSION	1	1,072 bytes	0.2%
RT_MANIFEST	1	624 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

Product	Wolfenstein The Old Blood v1.0 Plus 12 Trainer
Description	FLiNG@3DMGAME Presents - Wolfenstein The Old Blood v1.0 Plus 12 Trainer
File Version	1.0.0.0
Original Name	Wolfenstein The Old Blood v1.0 Plus 12 Trainer.exe
Internal Name	Wolfenstein The Old Blood v1.0 Plus 12 Trainer
Copyright	风灵月影 (FLiNG@3DMGAME) Copyright (C) 2015

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

10 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1