| File Name | Game.exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-01 19:00:30 UTC |
Malware family: Heuristic
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
90f116907c45e9c4bdb24129c0867fc2
|
|
| SHA1 |
47e12bd06468189b281c34c1dc83bbced55c4118
|
|
| SHA256 |
27e2fc736f544a759216f15e900dddac91f0e8c7ab4821cca820abdb5e2342d1
|
|
| SHA512 |
0e182825447285277eea369f80704b9be9abcaee322f0b9a7467dd8f860e054ed2ced23a7ba933e87fa4ce5c9cbfc95d1306ede55067f5959d03f857885e1425
|
|
| ImpHash |
e05e31a5063c852520cc6950fe83ad1a
|
| Icon |
Hash: 7ff3bf24f5a2bede309d3378693c2d4f
Fuzzy: e824f7459a3e6a44efe7d5b9ad41e6d1 dHash: c4dcece9d4cc8c84 |
| Image Base | 0x140000000 |
| Entry Point | 0x1414c3db8 |
| Compilation Time | 2025-12-30 01:08:28 |
| Checksum | 0x04e60db8 (Actual: 0x04e60db8) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\20.9.0\out\Release\node.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports | 13 libraries |
| Exports | 8527 functions |
| Resources | 31 Resources |
| Sections | 7 Sections |
| ProductName | Jbqkdpqbs Ctac |
| FileVersion | 9.56.2811.7645 |
| ProductVersion | 9.56.2811.7645 |
| OriginalFilename | pfnswrb.exe |
| LegalTrademarks | Nnsxyhkkv trademark. |
| FileDescription | Secure Fsxajapz System |
| CompanyName | Nnsxyhkkv Umml LLC |
| LegalCopyright | © 2020 Nnsxyhkkv Umml LLC. All rights reserved. |
| InternalName | fnjfmhkhftznbdfmrano |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
22,132,396 bytes | 22,132,736 bytes | 6.49 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
ECCA261F41E2DA4EB79CA70BA1504D42 |
.rdata |
0x0151d000 |
45,881,178 bytes | 45,881,344 bytes | 6.18 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC1319E675C14263915BAC9F7DFF2BF5 |
.data |
0x040df000 |
3,066,916 bytes | 202,752 bytes | 3.81 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2A2803E07346CDF6A7BDB4244500EA47 |
.pdata |
0x043cc000 |
1,038,204 bytes | 1,038,336 bytes | 6.95 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
52ED91E3978669D65D3634E94EFDCA40 |
.fptable |
0x044ca000 |
256 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x044cb000 |
136,774 bytes | 137,216 bytes | 7.94 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
CA35987CAC0B4154A245219377560368 |
.reloc |
0x044ed000 |
144,740 bytes | 144,896 bytes | 5.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F682AD9AA86CAB90A634271C65A8BA45 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 7 | 131,212 bytes | |
| RT_MENU | 2 | 124 bytes | |
| RT_DIALOG | 1 | 216 bytes | |
| RT_STRING | 12 | 1,148 bytes | |
| RT_ACCELERATOR | 3 | 176 bytes | |
| RT_RCDATA | 3 | 284 bytes | |
| RT_GROUP_ICON | 1 | 104 bytes | |
| RT_VERSION | 1 | 932 bytes | |
| RT_MANIFEST | 1 | 822 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02054023 without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!