Gridinsoft Logo
File Icon

Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer.exe Hack GameHack Analysis

Updated 1 year ago
Checked by Malware Check
Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer.exe

Technical Analysis

File Name Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.170.174
Database Version 2024-03-28 20:00:24 UTC
⚠

Hack.Win64.GameHack.cl

Malware family: GameHack

GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
N/A
Detection Rate
1,214,464
File Size (bytes)
2024-03-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ca5b39b4365f0f41ef7edfc0ce01f9ec
SHA1
425e66ba4b6c759a07d86f9f2389fba6a41a9c87
SHA256
49166a6abda8f4d2e62366cee4a91706d688d8b1f04636933f1e8953148244a1
SHA512
6c5152e1c39feb89ed84fce4d3bfe252e163dc50352c536ca82f5b301dcc7e0e55883a8012feddc2d598719cf440afe252cf65576a1a6b6bb5418469cba97f73
ImpHash
b28236fc519c3875acc652652dd3e594

PE Analysis

Basic Information

▼
Icon
Hash: 5b5c69756305e5b7bcc03412fe64a17c
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e2eaaf0
Image Base 0x140000000
Entry Point 0x140037138
Compilation Time 2022-12-22 07:49:24
Checksum 0x00000000 (Actual: 0x0012e6be)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 10 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports 0 functions
Resources 16 Resources
Sections 6 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer
FileVersion 1.0.0.0
InternalName Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer
LegalCopyright FLiNG Copyright (C) 2021
OriginalFilename Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer.exe
ProductName Sid Meiers Civilization VI v1.0-v20221215 Plus 22 Trainer
ProductVersion 1.0.440.23
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 496,928 bytes 497,152 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 78E1824C636F3A91C2353B2F9D96EFBF
.rdata 0x0007b000 192,766 bytes 193,024 bytes 5.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8B413338028EC3CA5E6015A601BB55F5
.data 0x000ab000 23,012 bytes 13,312 bytes 4.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A75D6EBFC5B37CCD51B0E35A5D4D4DFA
.pdata 0x000b1000 25,428 bytes 25,600 bytes 5.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 121EA4D3BBC3CC582A5DDDE9CB405D85
.rsrc 0x000b8000 479,120 bytes 479,232 bytes 7.50 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4B9DF51EF57019BEFA71CCC2632B9F16
.reloc 0x0012d000 4,988 bytes 5,120 bytes 5.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ DD238AB685944200928343564D06A965
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 16 (478,072 bytes)
Resource Type Count Total Size Percentage
COVER 1 55,959 bytes
11.7%
REMOTE 1 4 bytes
0%
UI 1 181,760 bytes
38%
WAVE 2 22,222 bytes
4.6%
RT_ICON 8 216,276 bytes
45.2%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 1,080 bytes
0.2%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Hack.Win64.GameHack.cl Removal

Gridinsoft has the capability to identify and eliminate Hack.Win64.GameHack.cl without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware