| File Name | Game.exe |
| File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2026-01-02 02:00:41 UTC |
Malware family: Heuristic
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
14ca4b2ed515369c92b9089a3768370e
|
|
| SHA1 |
4adefaedb76b03c6945cfbf3412a5990ddacda8a
|
|
| SHA256 |
c442f8a60887fcccec3a2c284037f6f786f57209389542838f00ff731377651d
|
|
| SHA512 |
7b14e9eeef27edb4bdcfdf1281205697b3e9adfb13db5ddafd760618ff0763e34552c491cee0f9847cf088767a3f5fe3cd3cff5c631016b5ebc2904e9a45afe4
|
|
| ImpHash |
e05e31a5063c852520cc6950fe83ad1a
|
| Icon |
Hash: b4586b3cf723a2df9f2f83132574c66a
Fuzzy: b45a2e161919c2697512764fce199b79 dHash: b2c8c04c6272f28c |
| Image Base | 0x140000000 |
| Entry Point | 0x1414c3db8 |
| Compilation Time | 2025-12-30 01:08:28 |
| Checksum | 0x04e4e847 (Actual: 0x04e4e847) |
| OS Version | 6.0 |
| PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
| PDB Path | C:\20.9.0\out\Release\node.pdb |
| Digital Signature | No valid SignedData structure was found. |
| Imports | 13 libraries |
| Exports | 8527 functions |
| Resources | 41 Resources |
| Sections | 7 Sections |
| InternalName | eqtbkdtcikquaxxwq |
| OriginalFilename | nagmlqaun.exe |
| LegalCopyright | © 2015 Iopcpahcx. All rights reserved. |
| FileVersion | 1.48.4735.6597 |
| ProductVersion | 1.48.4735.6597 |
| ProductName | Mkgydzry Devfmpowy |
| LegalTrademarks | Iopcpahcx and logo are trademarks. |
| CompanyName | Iopcpahcx |
| FileDescription | Enterprise Ofzzvjet Platform |
| Translation | 0x0409 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
22,132,396 bytes | 22,132,736 bytes | 6.49 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
ECCA261F41E2DA4EB79CA70BA1504D42 |
.rdata |
0x0151d000 |
45,881,178 bytes | 45,881,344 bytes | 6.18 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC1319E675C14263915BAC9F7DFF2BF5 |
.data |
0x040df000 |
3,066,916 bytes | 202,752 bytes | 3.81 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
2A2803E07346CDF6A7BDB4244500EA47 |
.pdata |
0x043cc000 |
1,038,204 bytes | 1,038,336 bytes | 6.95 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
52ED91E3978669D65D3634E94EFDCA40 |
.fptable |
0x044ca000 |
256 bytes | 512 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BF619EAC0CDF3F68D496EA9344137E8B |
.rsrc |
0x044cb000 |
141,706 bytes | 141,824 bytes | 7.93 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2877A7122E30E8EB5DC49293E45BCE6F |
.reloc |
0x044ee000 |
144,740 bytes | 144,896 bytes | 5.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
F682AD9AA86CAB90A634271C65A8BA45 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
1 section(s) with elevated entropy (≥6.5) - possible compression
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 7 | 134,830 bytes | |
| RT_MENU | 3 | 266 bytes | |
| RT_DIALOG | 2 | 372 bytes | |
| RT_STRING | 20 | 1,676 bytes | |
| RT_ACCELERATOR | 4 | 232 bytes | |
| RT_RCDATA | 2 | 230 bytes | |
| RT_GROUP_ICON | 1 | 104 bytes | |
| RT_VERSION | 1 | 940 bytes | |
| RT_MANIFEST | 1 | 822 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02054023 without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!