The dgv110+18tr.exe (Day's Gone v1.10 +18 Trainer) File Analysis

Updated 1 second ago

Checked by Malaware Check

dgv110+18tr.exe

Technical Analysis

File Name	dgv110+18tr.exe
File Type	Win32 EXE
Magic Bytes	`MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS`
SSDEEP Hash	98304:OYLVb1sf+3sYVrRIWmNWzwjvGByWKKw4rz:bVBO+3sOr98RTGByWKKwG
Scanner Version	1.0.217.174
Database Version	2025-06-07 17:00:20 UTC

⚠

Suspicious File Detected

Detected by 4 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Detection Rate

3,378,688

File Size (bytes)

4/53

Engines Detected

2025-06-07

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	9a42c104dc74ffad8f639bfeb4763c6d
SHA1	4e7e20bc303ceb043f4dd37cb042ac15e3ff3798
SHA256	138ae98ecaece28de2a0141b1970960cb2890488b8ff37bba0c07ec0e8b314ca
SHA512	d3228a1809d2972236930ac23fa9a60e950f64746940c6ae3e3b157010a75960625ba25f5d1dcb4cea0be8f8e0a0aa4c31a95af3a883cffe14af697a49d65dc5
ImpHash	af24d87e3047017d7c795dcfbe25a09c

Security Engines with Detections (4 of 53)

Cylance

Unsafe Malicious

Sophos

GameHack (PUA) Malicious

Google

Detected Malicious

Microsoft

Trojan:Win32/Sabsik.FL.A!ml Malicious

49 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: ddc9967b2058effe7e9450ce79c8a2cd Fuzzy: 91273f9e4ea33aefb7d9f4c619d84a9e dHash: d0c88edeeeaab6e4
Image Base	`0x00400000`
Entry Point	`0x00d4847b`
Compilation Time	2025-05-23 08:58:11
Checksum	0x00000000 (Actual: 0x00347862)
OS Version	6.0
PEiD Signatures	`MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS`
Digital Signature	No valid SignedData structure was found.
Imports	15 libraries
Exports	2 functions
Resources	120 Resources
Sections	3 Sections

Version Information

▼

CompanyName	Home of Gamehacking
FileVersion	1.0.0.0
LegalCopyright	iNvIcTUs oRCuS
OriginalFilename	dgv110+18tr.exe
ProductVersion	1.0.0.0
ProgramID	com.embarcadero.Project1
FileDescription	Day's Gone v1.10 +18 Trainer
ProductName	Project1
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.MPRESS1`	`0x00001000`	9,728,000 bytes	3,197,952 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2E6002D0E9292069FB94B4E87F5BB260`
`.MPRESS2`	`0x00948000`	4,640 bytes	5,120 bytes	5.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D2C515F056A12466CB4F50A6CFAE2673`
`.rsrc`	`0x0094a000`	174,992 bytes	175,104 bytes	7.11 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`12D2EB9C1BC14EF72A2C1D1EB3EDB7B3`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 120 (3,314,985 bytes)

Resource Type	Count	Total Size	Percentage
VCLSTYLE	1	52,841 bytes	1.6%
WAVE	9	2,342,186 bytes	70.7%
RT_CURSOR	8	2,464 bytes	0.1%
RT_ICON	3	164,277 bytes	5%
RT_STRING	35	38,284 bytes	1.2%
RT_RCDATA	53	712,147 bytes	21.5%
RT_GROUP_CURSOR	8	160 bytes	0%
RT_GROUP_ICON	1	48 bytes	0%
RT_VERSION	1	764 bytes	0%
RT_MANIFEST	1	1,814 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

Product	Project1
Description	Day's Gone v1.10 +18 Trainer
File Version	1.0.0.0
Original Name	dgv110+18tr.exe
Copyright	iNvIcTUs oRCuS

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

4 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1