| File Name | Game.exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-01 02:00:38 UTC |
Malware family: Heuristic
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
e56f6b9635ef3384f1d89f371a39a80a
|
|
| SHA1 |
7a715fdad2759182ef16a34e55311f379ce79574
|
|
| SHA256 |
b7d48580f00ffdf3f52f3f381c4ca8886317688c597031d0635045964c8ed26a
|
|
| SHA512 |
e812afbd21fbe42e2eaadcce5f802c7b9001de0694f5fed79f9b5705ca4b77f92d3649c8936a9e8c9377993fe54eb9be29a513c20b9be257fc1bc9240e492c1e
|
|
| ImpHash |
e05e31a5063c852520cc6950fe83ad1a
|
| Icon |
Hash: c5cf92b05a136d3eb15bb3c8a95f4e91
Fuzzy: 9c40a6d0c7e71239aa24bb79b0edec37 dHash: 90c4d8f8f2e07033 |
| Image Base | 0x140000000 |
| Entry Point | 0x1414c3db8 |
| Compilation Time | 2025-12-30 01:08:28 |
| Checksum | 0x04e49482 (Actual: 0x04e49482) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\20.9.0\out\Release\node.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports | 13 libraries |
| Exports | 8527 functions |
| Resources | 35 Resources |
| Sections | 7 Sections |
| FileDescription | Tijcgvbrpe Technology |
| FileVersion | 7.13.7520.7402 |
| CompanyName | Gvdyrsws Psztvghs Edmco Security |
| InternalName | pccojsgms |
| OriginalFilename | rzzttqgzsxxpuq.exe |
| LegalCopyright | © 2024 Gvdyrsws Psztvghs Edmco Security. All rights reserved. |
| ProductVersion | 7.13.7520.7402 |
| LegalTrademarks | Gvdyrsws and logo are trademarks. |
| ProductName | Rrijjsmvkt Qpgdateoke Ivefkdya Manager |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
22,132,396 bytes | 22,132,736 bytes | 6.49 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
ECCA261F41E2DA4EB79CA70BA1504D42 |
.rdata |
0x0151d000 |
45,881,178 bytes | 45,881,344 bytes | 6.18 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC1319E675C14263915BAC9F7DFF2BF5 |
.data |
0x040df000 |
3,066,916 bytes | 202,752 bytes | 3.81 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2A2803E07346CDF6A7BDB4244500EA47 |
.pdata |
0x043cc000 |
1,038,204 bytes | 1,038,336 bytes | 6.95 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
52ED91E3978669D65D3634E94EFDCA40 |
.fptable |
0x044ca000 |
256 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x044cb000 |
134,966 bytes | 135,168 bytes | 7.94 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E7BFF29797C2CC10EB6DF7489522D0AC |
.reloc |
0x044ec000 |
144,740 bytes | 144,896 bytes | 5.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F682AD9AA86CAB90A634271C65A8BA45 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 7 | 129,017 bytes | |
| RT_MENU | 2 | 176 bytes | |
| RT_DIALOG | 2 | 304 bytes | |
| RT_STRING | 16 | 1,272 bytes | |
| RT_ACCELERATOR | 4 | 184 bytes | |
| RT_RCDATA | 1 | 94 bytes | |
| RT_GROUP_ICON | 1 | 104 bytes | |
| RT_VERSION | 1 | 1,048 bytes | |
| RT_MANIFEST | 1 | 822 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02054023 without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!