Gridinsoft Logo
File Icon

Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer.exe Malware Generic Analysis

Updated 17 days ago
Checked by Malaware Check
Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer.exe

Technical Analysis

File Name Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-20 18:00:25 UTC
⚠

Malware.Win64.Generic.cld

Malware family: Generic

This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
1,224,192
File Size (bytes)
2025-05-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4053929823c7be719f1a99a31c2065ec
SHA1
0c2c14628de016473906532d1b78cc29c230f9b7
SHA256
1fc0d1ab2e50f766d847bf33234ead7cb04126aac447c986254d4b6f301f1945
SHA512
a88f507b4140f0b857723e200f1222685a92bed26be09af442e187a832679a4bd4d3537ec64e4b693b9a4493ecece2f7f7cabded6084fa99c935623d05724704
ImpHash
b0caf732be77557dd82114fc6e1fabeb

PE Analysis

Basic Information

▼
Icon
Hash: 7249d5fc6221a5b21411aa2ad27aa387
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e2eaa70
Image Base 0x140000000
Entry Point 0x140027798
Compilation Time 2020-08-12 02:01:36
Checksum 0x00000000 (Actual: 0x0013047c)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
KERNEL32, USER32, SHELL32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports 0 functions
Resources 12 Resources
Sections 6 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer
FileVersion 1.0.0.0
InternalName Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer
LegalCopyright FLiNG Copyright (C) 2020
OriginalFilename Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer.exe
ProductName Command and Conquer Remastered Collection v1.0-v1.153 Plus 12 Trainer
ProductVersion 1.0.768.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 430,564 bytes 430,592 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ FAFEA8BAD1FEC3D1543A2687CED04C82
.rdata 0x0006b000 167,920 bytes 167,936 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 963E7B8CB62BACA1435B3C455BDD0935
.data 0x00094000 22,212 bytes 12,800 bytes 4.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B6938511ED9345AD68A0482FE4097C4D
.pdata 0x0009a000 23,412 bytes 23,552 bytes 5.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8535EDBAF4A7503518EAC8D0D83E4D3B
.rsrc 0x000a0000 583,032 bytes 583,168 bytes 7.55 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5819D6B18C3D32B9C176543D3C3AD30D
.reloc 0x0012f000 4,928 bytes 5,120 bytes 5.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 76491FFDC222B345167D77FA516FD2B7
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 12 (582,170 bytes)
Resource Type Count Total Size Percentage
COVER 1 53,771 bytes
9.2%
REMOTE 2 232,964 bytes
40%
UI 1 181,248 bytes
31.1%
WAVE 2 22,222 bytes
3.8%
RT_ICON 3 90,092 bytes
15.5%
RT_GROUP_ICON 1 48 bytes
0%
RT_VERSION 1 1,172 bytes
0.2%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win64.Generic.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win64.Generic.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware