File Name | ZM 1.4.9.exe |
File Type |
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
|
Scanner Version | 1.0.179.174 |
Database Version | 2024-06-13 14:00:21 UTC |
Malware family: GameHack
Hash Type | Value | Action |
---|---|---|
MD5 |
2d4b798194da74f9973ad996e7e45670
|
|
SHA1 |
cf278e30db39739a7cf8c99824f2221ce4433efc
|
|
SHA256 |
bad053b60949c6a109f1c91a2a525ba2a3d5ac047f0a04509b9989c43215c94a
|
|
SHA512 |
e09dfc8d4e14650a1243463f29e132388eedc6d00a0bdaddd1a12cd3d89df11252f0cac98723eb5a25cf2493f6dd0844e958fa770d3cea62dcfae6292d0f5bda
|
Icon |
Hash: 1f0f3fb06dce6a6fb083d138a6492244
Fuzzy: ed4946d6dfc278bb57cff16361238c37 dHash: 8f374f1b357d2917 |
Image Base | 0x140000000 |
Entry Point | 0x140000000 |
Compilation Time | 2020-02-05 17:36:38 |
Checksum | 0x00000000 (Actual: 0x0005a5cd) |
OS Version | 4.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports | 0 |
Exports | 0 functions |
Resources | 4 Resources |
Sections | 2 Sections |
Translation | 0x0000 0x04b0 |
Comments | |
CompanyName | |
FileDescription | |
FileVersion | 1.4.9.0 |
InternalName | Title Update 30.exe |
LegalCopyright | Copyright © 2020 |
LegalTrademarks | |
OriginalFilename | Title Update 30.exe |
ProductName | |
ProductVersion | 1.4.9.0 |
Assembly Version | 1.4.9.0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00002000 |
288,336 bytes | 288,768 bytes | 5.56 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
ED90428189B2B23D41078119539C4334 |
.rsrc |
0x0004a000 |
71,780 bytes | 72,192 bytes | 5.24 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
C697DFC50FBC69047D739BB444803631 |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 1 | 67,624 bytes | |
RT_GROUP_ICON | 1 | 20 bytes | |
RT_VERSION | 1 | 788 bytes | |
RT_MANIFEST | 1 | 3,038 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Hack.Win64.GameHack.ns without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system