Gridinsoft Logo
File Icon

Game.exe Trojan Heuristic Analysis

Technical Analysis

File Name Game.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2025-12-22 11:00:41 UTC

Trojan.Heur!.02054023

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
77,350,203
File Size (bytes)
2025-12-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b7591f24e8e8b7765e527608f66777d4
SHA1
26fd040fcc8c724c4c5a7a96426800eb79b3e815
SHA256
8781aa68e140527d55cfbcfe370a60eff04bebb67df4a8637e1b127668c77ee6
SHA512
57f2baef38306542a9c2125e47eeef0fb0c0e72c4f0c67c5a499502abea06ba58394c716f09641d1d77cc5f7d9c7bc4f4db14850d8744d49e9d9ca15dbbd1044
ImpHash
04397e0bcb7648e70cf6570253f46feb

PE Analysis

Basic Information

Icon
Hash: 6c9069b876d6515950db30a9ab6d9e14
Fuzzy: 5fe5e11aa79e0bced6708cf7529b9734
dHash: d4b2f06161690ca2
Image Base 0x140000000
Entry Point 0x14151df48
Compilation Time 2025-12-19 23:01:28
Checksum 0x049c9ce6 (Actual: 0x049c9ce6)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\20.14.0\out\Release\node.pdb
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 8533 functions
Resources 32 Resources
Sections 7 Sections

Version Information

OriginalFilename cloudsync.exe
FileVersion 9.61.599.2692
LegalCopyright © 2024 SecureData Solutions. All rights reserved.
LegalTrademarks MediaProcessor Systems trademark.
CompanyName SecureData Solutions
FileDescription Cloud Storage Synchronization Engine
InternalName videopro
ProductVersion 9.61.599.2692
ProductName AudioEngine Processing Runtime
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 22,501,548 bytes 22,501,888 bytes 6.49 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 88F5DF014AFC19B3110BDB859D38268C
.rdata 0x01577000 45,128,196 bytes 45,128,704 bytes 6.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3F7A2D27C8F8A2842D323089F58DF2AF
.data 0x04081000 3,067,556 bytes 203,264 bytes 3.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 806F6CE13130540FA74E7DCC4CFA5D5D
.pdata 0x0436e000 1,050,000 bytes 1,050,112 bytes 6.93 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9C34FDAC7860AAC90B7D8BCB8F4AD04E
.fptable 0x0446f000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x04470000 115,535 bytes 115,712 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6E4E38051E0B071271FF0D575BBB4313
.reloc 0x0448d000 145,492 bytes 145,920 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1A6BDDECF932D38F811CA7950E1EDD6B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 32 (113,727 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 110,096 bytes
96.8%
RT_MENU 1 94 bytes
0.1%
RT_DIALOG 2 364 bytes
0.3%
RT_STRING 11 924 bytes
0.8%
RT_ACCELERATOR 5 296 bytes
0.3%
RT_RCDATA 3 206 bytes
0.2%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 996 bytes
0.9%
RT_MANIFEST 1 647 bytes
0.6%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.02054023 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02054023 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware