Gridinsoft Logo
File Icon

ELoad.exe Trojan Heuristic Analysis

Updated 3 days ago
Checked by Malware Check
eLoad.exe

Technical Analysis

File Name eLoad.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.222.174
Database Version 2025-08-11 07:00:29 UTC
⚠

Trojan.Heur!.02056023

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
82,384,755
File Size (bytes)
2025-08-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
aeaf22a8fb31bf931ab4a32aabd697c7
SHA1
606a98882b8a18c9cfbceaba829a2ce8481ac67a
SHA256
033ff92380fb24617607ebdb4ea8b09aa3507527b34abf899fce9612d98beeb0
SHA512
2e925e941d25f3f662d9c9e96ff10916dcb56cd63c76840602f3b006323bd44e2b813675eb437bd38c94e78a70373729194527e708cbddb12e35e52059cc450a
ImpHash
7d6859adf67d0b57e6d77234869ef0eb

PE Analysis

Basic Information

▼
Icon
Hash: 751d5453f26e4bfb9c56557406a33ec4
Fuzzy: eabee590839d9802148249a93052df59
dHash: b9b9e8f8ceceee6c
Image Base 0x140000000
Entry Point 0x141c5c350
Compilation Time 2025-08-05 18:40:56
Checksum 0x04e99797 (Actual: 0x04e99796)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\23.0.0\out\Release\node.pdb
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 8839 functions
Resources 16 Resources
Sections 7 Sections

Version Information

▼
FileDescription General-purpose programming language runtime
InternalName CoreFlow.exe
OriginalFilename CoreFlow.exe
CompanyName FlowTech Innovations
LegalCopyright © 2025 FlowTech Innovations. All rights reserved.
ProductName CoreFlow
FileVersion 9.0.0.0
ProductVersion 9.0.0.0
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 30,097,948 bytes 30,098,432 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B2A80486F5042100137AED695DF9E42C
.rdata 0x01cb6000 50,018,270 bytes 50,018,304 bytes 6.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 10C5D3D86B6272B4CE46396306B368BB
.data 0x04c6a000 3,195,236 bytes 312,832 bytes 3.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3591CE54F2037C50A57FEA1FD6E99337
.pdata 0x04f77000 1,365,708 bytes 1,366,016 bytes 6.95 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 76658FB9B89973BAC9BA0ACD95F0DA0D
.fptable 0x050c5000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x050c6000 94,890 bytes 95,232 bytes 7.42 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1D4E689B229285CEDA5EA7157B483B6D
.reloc 0x050de000 158,456 bytes 158,720 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C75B013FB0C2EE73BEE0C16B4EE8BA37
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 16 (93,988 bytes)
Resource Type Count Total Size Percentage
RT_ICON 13 92,134 bytes
98%
RT_GROUP_ICON 1 188 bytes
0.2%
RT_VERSION 1 844 bytes
0.9%
RT_MANIFEST 1 822 bytes
0.9%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.02056023 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02056023 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware