The 开始游戏.exe (开始游戏) File Analysis

Updated 2 hours ago

Checked by Malware Check

开始游戏.exe

Technical Analysis

File Name	开始游戏.exe
File Type	Win32 EXE
Magic Bytes	`PE32 executable (GUI) Intel 80386, for MS Windows`
SSDEEP Hash	196608:SJoew+DOLtahDrbKGkWMFmtvcsD12JHKZvP5/K1m:AHOLtGTfMstrJ2QZvB/8m
Scanner Version	1.0.258.174
Database Version	2026-11-01 11:07:05 UTC

⚠

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

10%

Detection Rate

7,629,824

File Size (bytes)

7/69

Engines Detected

2026-11-01

Analysis Date

Scan Another File

The uploaded file itself is not retained or shared with third parties. File names, hashes, and analysis results may appear in public reports. For confidential material, contact Support before uploading. How we use your data.

File Identification

Hash Type	Value	Action
MD5	0185b44e69a8ababd3649b54ed785fc7
SHA1	3ebbe39143cc064323c6e9688884d023714109b9
SHA256	72968110ee1bbea22f86cc4695bb2a2601e53cb849dea0957d6fd5c7cad393c1
SHA512	676cd1033d2de36832cdf7e38c66fd6c78dd0e205cb47fedcbccbbfa818dfc439dc72145abcf07fe0c1f55cd55fde1be06bfe3934e30108ae423cd5191176f14
ImpHash	9504d686551f6ba445c5bb27f4aea80c

Security Engines with Detections (7 of 69)

Cylance

Unsafe Malicious

CrowdStrike

win/malicious_confidence_70% (W) Malicious

TrendMicro-HouseCall

Trojan.Win32.Gen.TL0101DT26ZM Malicious

Trapmine

malicious.moderate.ml.score Malicious

Gridinsoft

Trojan.Win32.Gen.cl Malicious

MaxSecure

Trojan.Malware.300983.susgen Malicious

alibabacloud

Backdoor Malicious

62 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 9668b62bb4058c734ce5a85e1475fcd9 Fuzzy: 971926fa2dee0c595bd5579a306afb46 dHash: 0605274444564d25
Image Base	`0x00400000`
Entry Point	`0x004061ae`
Compilation Time	2023-07-04 07:06:08
Checksum	0x00753174 (Actual: 0x0074a68a)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`D:\work\start\pc\Release\ali213_engine_v1.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	19 libraries
Exports	59 functions
Resources	14 Resources
Sections	9 Sections

Version Information

▼

LegalCopyright	Copyright (C) 2022
OriginalFilename	StartGame.exe
FileVersion	2.0.0.1
ProductName	开始游戏
InternalName	StartGame.exe
CompanyName	杭州凤侠网络科技有限公司
FileDescription	开始游戏
ProductVersion	2.0.0.1
Translation	0x0009 0x0001

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,323,973 bytes	1,324,032 bytes	5.98 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C286FA85CC57B8416CDB5BC4459A3500`
`.rdata`	`0x00145000`	259,019 bytes	259,072 bytes	4.81 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7AFC7AE2E407E10F4051A9B755C41B99`
`.data`	`0x00185000`	24,528 bytes	11,776 bytes	4.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`ECDDF6FBA5E7B478DF16BE210648F9E9`
`.idata`	`0x0018b000`	12,655 bytes	12,800 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A39360FCDF6065B69D70CA0C035CAE45`
`.gfids`	`0x0018f000`	3,252 bytes	3,584 bytes	2.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DCB09DA3866DF1C6D6D2E47902B0261C`
`.tls`	`0x00190000`	777 bytes	1,024 bytes	0.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C573BD7CEA296A9C5D230CA6B5AEE1A6`
`.00cfg`	`0x00191000`	260 bytes	512 bytes	0.06 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7BAFCD4A05F6FF4EC6A551F6E69F4D94`
`.rsrc`	`0x00192000`	5,962,224 bytes	5,962,240 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`28DF5F208D816FD394E53164303C00FC`
`.reloc`	`0x00742000`	53,508 bytes	53,760 bytes	6.34 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`5C1EDCA0B7BA0C550DF991FD166E8596`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 14 (5,961,352 bytes)

Resource Type	Count	Total Size	Percentage
BINDATA	1	5,897,504 bytes	98.9%
RT_ICON	10	62,118 bytes	1%
RT_GROUP_ICON	1	146 bytes	0%
RT_VERSION	1	680 bytes	0%
RT_MANIFEST	1	904 bytes	0%

Certificate Chain Analysis

▼

Certificate Information

Product	开始游戏
Description	开始游戏
File Version	2.0.0.1
Original Name	StartGame.exe
Internal Name	StartGame.exe
Copyright	Copyright (C) 2022

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

Security engines flagged this file. Review the detections and verify the exact download before running it.

1
Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
2
Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
3
Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
4
Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.

Proactive Protection

7 security engines flagged this file. Could be a real threat, or could be a false alarm — common with keygens, game trainers, and legitimate system utilities. Check if the file has a valid digital signature and whether it came from the official source.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Signed in via Gridinsoft Portal · View profile

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now