Gridinsoft Logo
File Icon

Sims-4-updater-v1.0.7.exe Trojan Gen Analysis

Updated 7 minutes ago
Checked by Malware Check
sims-4-updater-v1.0.7.exe

Technical Analysis

File Name sims-4-updater-v1.0.7.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-12 01:00:16 UTC
⚠

Trojan.Win64.Gen.cl

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
18,205,432
File Size (bytes)
2025-07-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
f9305ebfc4d9499a4edb3b708d511287
SHA1
64293686e94954b57709459469a22449aa615bd4
SHA256
6e1daeee3c7094e6c22df511156fce1ec5a87dd6937c26ab6430ccfa6efa0ec7
SHA512
c0f07983577cc84d3aab2532892084f3d9d86b2d946c9fbd4593ecd626afcf5115cbe8c8ffa2c227bf07fdc29671dddb8d76e05c7fbcd669fe6392af4ab1bb9f
ImpHash
a6cec5b1a631d592d80900ab7e1de8df

PE Analysis

Basic Information

▼
Icon
Hash: 1499d8f52e8a3e887fb726a691405d70
Fuzzy: 9349f84cfaac4acec2f4bc2200923aef
dHash: f0ccb63626aecce8
Image Base 0x140000000
Entry Point 0x14000afb0
Compilation Time 2023-06-18 14:08:09
Checksum 0x01164893 (Actual: 0x01164893)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 5 libraries
USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports 0 functions
Resources 6 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 165,664 bytes 165,888 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ BDE1E371902CF81EA9BE7E3F95382CFD
.rdata 0x0002a000 76,446 bytes 76,800 bytes 5.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 34CD2843E21F9D0F5135C9AF0AA485E2
.data 0x0003d000 66,536 bytes 3,584 bytes 1.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BAF7E08C61EEB50B5A3978422561C938
.pdata 0x0004e000 8,388 bytes 8,704 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 306BE8C7742D2C9622517B124EBF3AC1
_RDATA 0x00051000 348 bytes 512 bytes 2.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E9000B5DE7C8EE475C9FF9BFD52A2223
.rsrc 0x00052000 45,928 bytes 46,080 bytes 7.20 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F9FCF09BB819B9D8F90DDF980C213B2C
.reloc 0x0005e000 1,880 bytes 2,048 bytes 5.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ BC11F54C2D33ADF3A95C6AF00E70EB22
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 6 (45,548 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 44,052 bytes
96.7%
RT_GROUP_ICON 1 62 bytes
0.1%
RT_MANIFEST 1 1,434 bytes
3.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Win64.Gen.cl Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win64.Gen.cl without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware