| File Name | Game.exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-03 14:00:36 UTC |
Malware family: Heuristic
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
5ff9be98fa1c240d2e16f244140fdc10
|
|
| SHA1 |
b592b2039ae266df1497d86cbf8e4cc61ed776db
|
|
| SHA256 |
4a5d389a2b6280d48ff77a79b69b43f6cefe870eb564a8874377151debff3b9e
|
|
| SHA512 |
4e10d8c5ae008df51070aeae77142ba598055c0052560bc91ed29829929b24a423564911be35a7f2c72cd31cebe715a8447db630d62b7950ff32b88f75635af5
|
|
| ImpHash |
e05e31a5063c852520cc6950fe83ad1a
|
| Icon |
Hash: 85ae103917a46410647f07de0b34039b
Fuzzy: 3ccb570a624e8547463cd5d36aba782e dHash: 324d6971f0b23316 |
| Image Base | 0x140000000 |
| Entry Point | 0x1414c3df8 |
| Compilation Time | 2026-01-02 13:27:29 |
| Checksum | 0x04e4582c (Actual: 0x04e4582c) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\20.7.0\out\Release\node.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports | 13 libraries |
| Exports | 8525 functions |
| Resources | 36 Resources |
| Sections | 7 Sections |
| ProductVersion | 8.97.3342.1803 |
| LegalTrademarks | Gvtg and logo are trademarks. |
| CompanyName | Gvtg Ilrte Bbyb Inc |
| FileVersion | 8.97.3342.1803 |
| OriginalFilename | cmzwzinwy.exe |
| LegalCopyright | © 2017 Gvtg Ilrte Bbyb Inc. All rights reserved. |
| FileDescription | Anslbppavjre Software |
| InternalName | cnzpideg |
| ProductName | Hbnte Gzgnmeaedtmn Lnbz Kit |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
22,132,268 bytes | 22,132,736 bytes | 6.48 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
674C20A0EF858F3B2009D292CBCAB48F |
.rdata |
0x0151d000 |
45,750,154 bytes | 45,750,272 bytes | 6.18 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8421EAE561982BE426CB789BF483C750 |
.data |
0x040bf000 |
3,066,756 bytes | 202,752 bytes | 3.79 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2F205A5166BCDEBFC645F63F43C750E7 |
.pdata |
0x043ac000 |
1,037,940 bytes | 1,038,336 bytes | 6.93 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B9A92783CD0F7C1EEDA26408A9294736 |
.fptable |
0x044aa000 |
256 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x044ab000 |
153,932 bytes | 154,112 bytes | 7.95 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
0F4BA32162D56291C1BD5FB9E2765FDF |
.reloc |
0x044d1000 |
144,640 bytes | 144,896 bytes | 5.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
C249E90EACADC4FD4A9D87F22EEC0CBD |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 7 | 147,888 bytes | |
| RT_MENU | 2 | 92 bytes | |
| RT_DIALOG | 2 | 320 bytes | |
| RT_STRING | 18 | 1,528 bytes | |
| RT_ACCELERATOR | 3 | 144 bytes | |
| RT_RCDATA | 1 | 80 bytes | |
| RT_GROUP_ICON | 1 | 104 bytes | |
| RT_VERSION | 1 | 952 bytes | |
| RT_MANIFEST | 1 | 824 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02054023 without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!