Gridinsoft Logo
File Icon

The Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe (Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer) File Analysis

Updated 1 day ago
Checked by Malware Check
Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe

Technical Analysis

File Name Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (GUI) x86-64, for MS Windows
SSDEEP Hash
24576:VZritY6zwa8TTWHcic9Mk/XxOU6iS6OQxQ9qlU7TSP88XFEQs:VFittVxHYIU6iSfQC9vKz1Rs
Scanner Version 1.0.222.174
Database Version 2025-08-02 13:00:21 UTC
⚠

Suspicious File Detected

Detected by 33 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
46%
Detection Rate
1,579,008
File Size (bytes)
33/72
Engines Detected
2025-08-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c221155d5c88195fcedb67a0ed12599e
SHA1
a6dce7df107b8d088ef1d64c797320fc3bb873f5
SHA256
a2dac1aaf8d3eff9bd1705aa996604fb3a7b1bc47061a55994d261b1ebc98f63
SHA512
fa2451772698279e737046f58fbfefa11492e18fbb0f3e44408924acfff4fa005558b1ca0e650de906609a6546d9f435aeee1819d1e7a537824c4aabe893e52e
ImpHash
c7e0abf2c0a6e5d56a52273ca9ad41de

Security Engines with Detections (33 of 72)

Bkav
W64.AIDetectMalware Malicious
Lionic
Trojan.Win32.GameHack.4!c Malicious
Elastic
malicious (high confidence) Malicious
ClamAV
Win.Dropper.GameHack-9917263-0 Malicious
CTX
exe.trojan.generic Malicious
CAT-QuickHeal
Trojan.Ghanarava.174798709112599e Malicious
Skyhigh
BehavesLike.Win64.Trojan.th Malicious
ALYac
Trojan.Generic.37998452 Malicious
Cylance
Unsafe Malicious
Sangfor
Trojan.Win32.Gamehack.Vt2p Malicious
K7GW
Trojan ( baba064c1 ) Malicious
CrowdStrike
win/grayware_confidence_100% (W) Malicious
ESET-NOD32
a variant of Win64/GameHack.BT potentially unsafe Malicious
Paloalto
generic.ml Malicious
BitDefender
Trojan.Generic.37998452 Malicious
MicroWorld-eScan
Trojan.Generic.37998452 Malicious
Emsisoft
Trojan.Generic.37998452 (B) Malicious
VIPRE
Trojan.Generic.37998452 Malicious
McAfeeD
ti!A2DAC1AAF8D3 Malicious
Ikarus
PUA.HackTool Malicious
GData
Trojan.Generic.37998452 Malicious
Google
Detected Malicious
Antiy-AVL
RiskWare/Win64.Gamehack Malicious
Arcabit
Trojan.Generic.D243CF74 Malicious
SUPERAntiSpyware
Trojan.Agent/Gen-Dropper Malicious
Varist
W64/3DMGAMETrainer.C.gen!Eldorado Malicious
Malwarebytes
GameHack.Riskware.Agent.DDS Malicious
TrendMicro-HouseCall
TROJ_GEN.R07AH09EI25 Malicious
Rising
Trojan.Generic!8.C3 (CLOUD) Malicious
TrellixENS
Artemis!C221155D5C88 Malicious
MaxSecure
Trojan.Malware.300983.susgen Malicious
Fortinet
Riskware/GameHack Malicious
DeepInstinct
MALICIOUS Malicious
39 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 74743c7b936c05c9784769c493fe0e8f
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e8eaab2
Image Base 0x140000000
Entry Point 0x140080e18
Compilation Time 2025-02-06 05:05:00
Checksum 0x00000000 (Actual: 0x0018632d)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 10 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports 0 functions
Resources 13 Resources
Sections 7 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
FileVersion 1.0.0.0
InternalName Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
LegalCopyright FLiNG Copyright (C) 2025
OriginalFilename Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe
ProductName Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
ProductVersion 1.0.0.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 699,468 bytes 699,904 bytes 6.42 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 529D134E9AE1FF818427930D0D05F07E
.rdata 0x000ac000 267,264 bytes 267,264 bytes 5.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F2C20D216677E0F226E502DCFBEC61C8
.data 0x000ee000 20,308 bytes 8,704 bytes 3.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8420E961C8172BC5E46861889979B292
.pdata 0x000f3000 27,096 bytes 27,136 bytes 5.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8B06B157594ABF7C1C5476A3D22C37DF
_RDATA 0x000fa000 500 bytes 512 bytes 4.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 429E1EF7F8C12B2C81485BDE4C4D4D01
.rsrc 0x000fb000 570,704 bytes 570,880 bytes 7.62 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4B52A40790B3CFFEAF0143D352BFC172
.reloc 0x00187000 3,304 bytes 3,584 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0C5E41AC14F62075603617D1B04B023E
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 13 (569,797 bytes)
Resource Type Count Total Size Percentage
COVER 1 111,957 bytes
19.6%
REMOTE 2 142,852 bytes
25.1%
UI 1 194,048 bytes
34.1%
WAVE 2 22,222 bytes
3.9%
RT_ICON 4 96,851 bytes
17%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 1,152 bytes
0.2%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
Description Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
File Version 1.0.0.0
Original Name Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe
Internal Name Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer
Copyright FLiNG Copyright (C) 2025

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
33 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware