The Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe (Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer) File Analysis
Technical Analysis
| File Name | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe |
| File Type |
Win32 EXE
|
| Magic Bytes | PE32+ executable (GUI) x86-64, for MS Windows |
| SSDEEP Hash |
24576:VZritY6zwa8TTWHcic9Mk/XxOU6iS6OQxQ9qlU7TSP88XFEQs:VFittVxHYIU6iSfQC9vKz1Rs
|
| Scanner Version | 1.0.222.174 |
| Database Version | 2025-08-02 13:00:21 UTC |
Suspicious File Detected
Detected by 33 security engines - requires caution
This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
46%
Detection Rate
1,579,008
File Size (bytes)
33/72
Engines Detected
2025-08-02
Analysis Date
Scan Another File
File Identification
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
c221155d5c88195fcedb67a0ed12599e
|
|
| SHA1 |
a6dce7df107b8d088ef1d64c797320fc3bb873f5
|
|
| SHA256 |
a2dac1aaf8d3eff9bd1705aa996604fb3a7b1bc47061a55994d261b1ebc98f63
|
|
| SHA512 |
fa2451772698279e737046f58fbfefa11492e18fbb0f3e44408924acfff4fa005558b1ca0e650de906609a6546d9f435aeee1819d1e7a537824c4aabe893e52e
|
|
| ImpHash |
c7e0abf2c0a6e5d56a52273ca9ad41de
|
Security Engines with Detections (33 of 72)
Bkav
W64.AIDetectMalware
Malicious
Lionic
Trojan.Win32.GameHack.4!c
Malicious
Elastic
malicious (high confidence)
Malicious
ClamAV
Win.Dropper.GameHack-9917263-0
Malicious
CTX
exe.trojan.generic
Malicious
CAT-QuickHeal
Trojan.Ghanarava.174798709112599e
Malicious
Skyhigh
BehavesLike.Win64.Trojan.th
Malicious
ALYac
Trojan.Generic.37998452
Malicious
Cylance
Unsafe
Malicious
Sangfor
Trojan.Win32.Gamehack.Vt2p
Malicious
K7GW
Trojan ( baba064c1 )
Malicious
CrowdStrike
win/grayware_confidence_100% (W)
Malicious
ESET-NOD32
a variant of Win64/GameHack.BT potentially unsafe
Malicious
Paloalto
generic.ml
Malicious
BitDefender
Trojan.Generic.37998452
Malicious
MicroWorld-eScan
Trojan.Generic.37998452
Malicious
Emsisoft
Trojan.Generic.37998452 (B)
Malicious
VIPRE
Trojan.Generic.37998452
Malicious
McAfeeD
ti!A2DAC1AAF8D3
Malicious
Ikarus
PUA.HackTool
Malicious
GData
Trojan.Generic.37998452
Malicious
Google
Detected
Malicious
Antiy-AVL
RiskWare/Win64.Gamehack
Malicious
Arcabit
Trojan.Generic.D243CF74
Malicious
SUPERAntiSpyware
Trojan.Agent/Gen-Dropper
Malicious
Varist
W64/3DMGAMETrainer.C.gen!Eldorado
Malicious
Malwarebytes
GameHack.Riskware.Agent.DDS
Malicious
TrendMicro-HouseCall
TROJ_GEN.R07AH09EI25
Malicious
Rising
Trojan.Generic!8.C3 (CLOUD)
Malicious
TrellixENS
Artemis!C221155D5C88
Malicious
MaxSecure
Trojan.Malware.300983.susgen
Malicious
Fortinet
Riskware/GameHack
Malicious
DeepInstinct
MALICIOUS
Malicious
39 engines reported no threats -
Only engines with detections are shown above for clarity
PE Analysis
Basic Information
▼| Icon |
Hash: 74743c7b936c05c9784769c493fe0e8f
Fuzzy: a1c738eea59667290c83d00f50a19604 dHash: 70f8fc7a7e8eaab2 |
| Image Base | 0x140000000 |
| Entry Point | 0x140080e18 |
| Compilation Time | 2025-02-06 05:05:00 |
| Checksum | 0x00000000 (Actual: 0x0018632d) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Digital Signature | No valid SignedData structure was found. |
| Imports |
10 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, mscoree, WININET, VERSION, WINMM |
| Exports | 0 functions |
| Resources | 13 Resources |
| Sections | 7 Sections |
Version Information
▼| CompanyName | 3DMGAME |
| FileDescription | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| FileVersion | 1.0.0.0 |
| InternalName | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| LegalCopyright | FLiNG Copyright (C) 2025 |
| OriginalFilename | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe |
| ProductName | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| ProductVersion | 1.0.0.1 |
| Translation | 0x0000 0x04b0 |
PE Sections
▼| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
699,468 bytes | 699,904 bytes | 6.42 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
529D134E9AE1FF818427930D0D05F07E |
.rdata |
0x000ac000 |
267,264 bytes | 267,264 bytes | 5.34 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F2C20D216677E0F226E502DCFBEC61C8 |
.data |
0x000ee000 |
20,308 bytes | 8,704 bytes | 3.45 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8420E961C8172BC5E46861889979B292 |
.pdata |
0x000f3000 |
27,096 bytes | 27,136 bytes | 5.84 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8B06B157594ABF7C1C5476A3D22C37DF |
_RDATA |
0x000fa000 |
500 bytes | 512 bytes | 4.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
429E1EF7F8C12B2C81485BDE4C4D4D01 |
.rsrc |
0x000fb000 |
570,704 bytes | 570,880 bytes | 7.62 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4B52A40790B3CFFEAF0143D352BFC172 |
.reloc |
0x00187000 |
3,304 bytes | 3,584 bytes | 5.28 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
0C5E41AC14F62075603617D1B04B023E |
Entropy Analysis Alert
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Analysis
▼
Total Resources: 13
(569,797 bytes)
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| COVER | 1 | 111,957 bytes | |
| REMOTE | 2 | 142,852 bytes | |
| UI | 1 | 194,048 bytes | |
| WAVE | 2 | 22,222 bytes | |
| RT_ICON | 4 | 96,851 bytes | |
| RT_GROUP_ICON | 1 | 62 bytes | |
| RT_VERSION | 1 | 1,152 bytes | |
| RT_MANIFEST | 1 | 653 bytes |
Certificate Chain Analysis
▼Certificate Information
| Product | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| Description | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| File Version | 1.0.0.0 |
| Original Name | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer.exe |
| Internal Name | Romance of the Three Kingdoms 8 Remake v1.0-v1.0.6 Plus 64 Trainer |
| Copyright | FLiNG Copyright (C) 2025 |
✓ This file has been digitally signed and the certificate chain has been verified
- The signature ensures file integrity and authenticity from the publisher
- Timestamping proves when the signature was applied
Certificate Verification Status
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Remember: This is Result of Online Virus Scanner
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareKeep Your System Protected
This file appears clean, but regular security maintenance is important
-
1
Weekly Quick Scans: Set a reminder to run a scan every Sunday. Most infections are caught within the first week, so regular checks give you peace of mind.
-
2
Update Everything: Those annoying update popups exist for a reason — they patch security holes. Windows, browsers, Adobe, Java — keep them all current.
-
3
Download Smart: Stick to official websites and app stores. If a "free" version of paid software sounds too good to be true, it probably comes with unwanted extras.
-
4
Think Before You Click: Malware loves email attachments and "urgent" links. Even if an email looks like it's from your bank or a friend, verify suspicious requests through a different channel.
Proactive Protection
33 security engines flagged this file. Could be a real threat, or could be a false alarm — common with keygens, game trainers, and legitimate system utilities. Check if the file has a valid digital signature and whether it came from the official source.
Leave a Comment
Gridinsoft Anti-Malware
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!
