Gridinsoft Logo
File Icon

Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05.exe Hack GameHack Analysis

Updated 1 day ago
Checked by Malware Check
Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05.exe

Technical Analysis

File Name Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.222.174
Database Version 2025-08-02 13:00:21 UTC
⚠

Hack.Win64.GameHack.oa!s1

Malware family: GameHack

GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
N/A
Detection Rate
1,659,392
File Size (bytes)
2025-08-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7465fd9323c1c808453320995f2f780d
SHA1
cd136c860675969d9a55e3099b8a9bdd34d3f6e3
SHA256
62c949e0398ac548847650e3ee547f34e5c26a792d1ac32eaaa5714de36e257f
SHA512
a87f511f488b2d9bc12761a1265f36e9c7202707d7937bfa95675bba564699925272e9c802f6f275598ad47425aca4de22574f941311cb6fbf1c5db2b2863372
ImpHash
e33fd99bdf94dab8ecadb8e52be5cbc6

PE Analysis

Basic Information

▼
Icon
Hash: 74743c7b936c05c9784769c493fe0e8f
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e8eaab2
Image Base 0x140000000
Entry Point 0x140096fc8
Compilation Time 2025-06-06 02:53:32
Checksum 0x00000000 (Actual: 0x001a246c)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, mscoree, VERSION, WINMM
Exports 0 functions
Resources 13 Resources
Sections 6 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05
FileVersion 1.0.0.0
InternalName Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05
LegalCopyright FLiNG Copyright (C) 2025
OriginalFilename Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05.exe
ProductName Easy Red 2 v1.5.1-v1.5.2 Plus 14 Trainer Updated 2025.06.05
ProductVersion 1.0.0.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 787,288 bytes 787,456 bytes 6.40 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6CE382E3F8DD7D722E8F08888D8F0166
.rdata 0x000c2000 248,090 bytes 248,320 bytes 5.50 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 75E8DCEBD37846925DC336A970C4016A
.data 0x000ff000 20,948 bytes 9,216 bytes 3.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 973C67D51262435A9965DF3D9E1A0636
.pdata 0x00105000 29,472 bytes 29,696 bytes 5.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EB25B1E21C0826A56C971B7357C4F5AD
.rsrc 0x0010d000 579,920 bytes 580,096 bytes 7.55 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9F369172FD636E3A26E9EEE3B7AE7AF2
.reloc 0x0019b000 3,440 bytes 3,584 bytes 5.36 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F1ED7F94B9717AF095952AA7E88F84CD
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 13 (579,011 bytes)
Resource Type Count Total Size Percentage
COVER 1 77,203 bytes
13.3%
REMOTE 2 185,348 bytes
32%
UI 1 195,584 bytes
33.8%
WAVE 2 22,222 bytes
3.8%
RT_ICON 4 96,851 bytes
16.7%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 1,088 bytes
0.2%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Hack.Win64.GameHack.oa!s1 Removal

Gridinsoft has the capability to identify and eliminate Hack.Win64.GameHack.oa!s1 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware