MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0
SHA3-384 hash:	78ead1cc51097bacb881f13b94d4b2124e18c3cd6fd48d7bc9548287a17ea0ab9660bb0305cf492f07cfd4cc14e4f9b2
SHA1 hash:	64689a52178b779210861a5082e22004960bfe4c
MD5 hash:	6b1221a468b55fa587eacb655129dd18
humanhash:	five-glucose-october-oxygen
File name:	Game.exe
Download:	download sample
File size:	82'260'236 bytes
First seen:	2025-12-24 20:11:42 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	e05e31a5063c852520cc6950fe83ad1a (12 x CoinMiner)
ssdeep	393216:8IFqKb+iUHdZQKPAg9hAJLPU689cN0DshEQu58EASEhoIaE2lShUcBs4DJ7G15P5:8ndQmQJhnVn0vSa5rs3wbZ
TLSH	T1F6086B4262EA05C4F9F7DA759AF65617C673BC122F3095CF220C17291F336E09A76B22
TrID	63.5% (.EXE) Win64 Executable (generic) (10522/11/4) 12.2% (.EXE) OS/2 Executable (generic) (2029/13) 12.0% (.EXE) Generic Win/DOS Executable (2002/3) 12.0% (.EXE) DOS Executable Generic (2000/1)
Magika	pebin
Reporter	lfr
Tags:	exe

lfr

https://www.patreon.com/file?h=146609322&m=585855568

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

95

Origin country :

FR

Vendor Threat Intelligence

ACCE MurmurHash3_128x64

Details

Link:

https://research.acce.ciphertechsolutions.com/results/49d89414-7015-405d-b02b-096a9a825693/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=694c490301c7b4a8fe556857

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

adaptive-context anti-debug anti-vm crypto expand fingerprint installer-heuristic lolbin microsoft_visual_cc nexe overlay overlay packed packed

Link:

https://www.filescan.io/uploads/694c492fe126b9ff439053a5/reports/c0e6afe6-595d-4444-9d1c-16ad20a34459/overview

Hybrid Analysis W64/Agent.KWO.gen

Verdict:

Malicious

Labled as:

W64/Agent.KWO.gen

Link:

https://www.hybrid-analysis.com/sample/e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0

InQuest

Result

Gathering data

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

exe x64

Link:

https://opentip.kaspersky.com/e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0/results?tab=lookup

Nucleon Malprob Malware

Score:

76%

Verdict:

Malware

File Type:

PE

Link:

https://malprob.io/report/e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0

CERT.PL MWDB

Gathering data

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/e497c9a0007fab8952a853de58ff0286a4d18ce08a6a8ed6737a0541d65bdab0

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4sl4tiaap6vysuvikppfr7ycq2snddharjvi5vttpicudvs33kya._file

Hatching Triage

Gathering data

Threat.Zone Suspicious

Verdict:

Suspicious

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/ce0d6750-a16c-4826-8ce7-538be9aa16bb

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.