Gridinsoft Logo
File Icon

South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer.exe Hack GameHack Analysis

Updated 1 year ago
Checked by Malware Check
South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer.exe

Technical Analysis

File Name South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.177.174
Database Version 2024-05-28 14:00:31 UTC
⚠

Hack.Win64.GameHack.ns

Malware family: GameHack

GameHack refers to game modification tools that manipulate game mechanics to provide unfair advantages, violating game terms of service and fair play principles.
N/A
Detection Rate
1,435,648
File Size (bytes)
2024-05-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ef831f9b9553c37511b221771db81c52
SHA1
db6487fa21c88ab3ec0d7d0a335707a848062da9
SHA256
bd01633db0e779075a59303152e2088f20c733f280f3c9156dd4eb335e5c0885
SHA512
c4556834bcf4f27fabb6bcaf2dded85e17914333f81577d8f453feffbeafdff214cfc20fc6811873dea1b8469c68904a014a799069a090488bc54b7c06adb478
ImpHash
7c91a31b4d65908482c82698b9872ecb

PE Analysis

Basic Information

▼
Icon
Hash: 0ba2d793e22fa06db80e1e35d71acfad
Fuzzy: c006c3aa0e4b6640c9b325e553adba39
dHash: 70f8fcfafeaeaaf0
Image Base 0x140000000
Entry Point 0x14003fec4
Compilation Time 2017-12-27 14:39:37
Checksum 0x00000000 (Actual: 0x00167502)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 11 libraries
Exports 0 functions
Resources 40 Resources
Sections 6 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription FLiNG@3DMGAME Presents - South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer
FileVersion 1.0.0.1
InternalName South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer
LegalCopyright 风灵月影 (FLiNG@3DMGAME) Copyright (C) 2017
OriginalFilename South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer.exe
ProductName South Park The Fractured But Whole v1.0-v20171218 Plus 9 Trainer
ProductVersion 1.0.527.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 486,157 bytes 486,400 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 4B862DDE059B198B15A6324C028235A3
.rdata 0x00078000 150,020 bytes 150,528 bytes 4.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5629CE29EFEBC2E4DDD5CF6482995217
.data 0x0009d000 47,104 bytes 17,408 bytes 4.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 177A4A4781E25F0889E93ED95F9F6187
.pdata 0x000a9000 24,348 bytes 24,576 bytes 5.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 43B428D9635807037B427AA87984A8EE
.rsrc 0x000af000 750,280 bytes 750,592 bytes 7.35 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5A1BCBD7C69AFA6FD191788A69037E2F
.reloc 0x00167000 4,880 bytes 5,120 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 880D1063E9BB485858070C9606090096
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 40 (747,994 bytes)
Resource Type Count Total Size Percentage
MID 1 32,445 bytes
4.3%
PNG 21 282,376 bytes
37.8%
REMOTE 2 296,452 bytes
39.6%
WAVE 2 22,222 bytes
3%
RT_ICON 9 112,476 bytes
15%
RT_ACCELERATOR 1 16 bytes
0%
RT_GROUP_ICON 2 138 bytes
0%
RT_VERSION 1 1,216 bytes
0.2%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Hack.Win64.GameHack.ns Removal

Gridinsoft has the capability to identify and eliminate Hack.Win64.GameHack.ns without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware