MarvelousDesigner12_Personal_x64.exe Trojan Heuristic Analysis
| Online Virus Checker | v.1.0.177.174 |
| DB Version: | 2024-05-26 23:00:28 |
Trojan.Heur!.03A50023
The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.
| File | MarvelousDesigner12_Personal_x64.exe |
| Checked | 2024-05-26 20:31:13 |
| MD5 | 64969c335360db09a40caaceb56d3449 |
| SHA1 | b7a4a81f5f0d7e717f25d5b5ababcae37a8e2ea7 |
| SHA256 | 023ee36dc42cb732461bbc242b12a0ba187f58f43ac6a9f0d8b28faba9d0967f |
| SHA512 | e21fd4b89c415c964e2f07fca0b0d3c194c138b490b20a1ad6b25258e4bd0a1ffa858d18791ba1b6115a32b041ff137e663aa27130b9d4bfe894e0aea03e7e88 |
| Imphash | 398e19f64b83e3e1820f85801e882524 |
| File Size | 69490145 bytes |
Trojan.Heur!.03A50023 Removal
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.03A50023 without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| FileVersion | 7, 1, 111, 41612 |
| ProductVersion | 7, 1, 111, 41612 |
| ProductName | Marvelous Designer Personal |
| LegalCopyright | Copyright 2022 CLO Virtual Fashion Inc. All rights reserved. |
| Translation | 0x0412 0x04b0 |
Portable Executable Info
 |
cfd8046d4ce61aa494c11f056d257c32 6e52000f98ea8404a09e57eb6e4b6e0a 70fc6d330f2bd0f0 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x14d875058 |
| Compilation: | 2022-11-15 10:42:34 |
| Checksum: | 0x0424a575 (Actual: 0x0424a575) |
| OS Version: | 6.0 |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 19 |
| Imports: | kernel32, OPENGL32, GLU32, ftgl_x64, libssl-1_1-x64, libcrypto-1_1-x64, WS2_32, WLDAP32, Qt5WebEngine, Qt5WebEngineWidgets, Alembic, substance_linker, substance_ogl3_blend, collada-dom2, python37, libfbxsdk, opencv_core450, opencv_imgcodecs450, opencv_imgproc450, opencv_videoio450, Qt5Core, Qt5Gui, Qt5Network, Qt5OpenGL, Qt5Xml, Qt5Svg, Qt5Widgets, WININET, USER32, GDI32, ADVAPI32, SHELL32, VCOMP140, MSVCP140, NETAPI32, dbghelp, VCRUNTIME140, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-filesystem-l1-1-0, api-ms-win-crt-utility-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-convert-l1-1-0, api-ms-win-crt-time-l1-1-0, api-ms-win-crt-environment-l1-1-0, api-ms-win-crt-locale-l1-1-0, |
| Exports: | 1 |
| Resources: | 4 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| 0x00001000 | 0x028a19c7 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x028a3000 | 0x052f348d | 0x0157a57b | 20913840c4c6e3a5248d13092021fb1b | 7.98 | |
| 0x07b97000 | 0x03fef235 | 0x01f6c196 | da83c10e1171d2d64f4713cfded56902 | 7.97 | |
| 0x0bb87000 | 0x003154f9 | 0x00052dda | a6b423d0df63e6360878f2a2ce3e5165 | 7.84 | |
| 0x0be9d000 | 0x00250008 | 0x0016791a | c629547972d3f0791cd1f49c7dfca6a1 | 7.73 | |
| 0x0c0ee000 | 0x00054602 | 0x00002fe2 | 99bb8dbce5231cbb1ad35209c91789c0 | 7.63 | |
| 0x0c143000 | 0x00000101 | 0x00000007 | 510e463391f640dd2e287c1129fd3833 | 2.81 | |
| 0x0c144000 | 0x0000d743 | 0x00000013 | 7f61882a8585cb94c35da72bbad8d298 | 4.14 | |
| 0x0c152000 | 0x00937d0c | 0x0031c951 | c5c9a555eba139d34f3812ab07136de3 | 7.96 | |
| 0x0ca8a000 | 0x0000011c | 0x00000011 | 1aae73b39617aa83d68ebf8527b6d278 | 4.09 | |
| 0x0ca8b000 | 0x0000011b | 0x00000012 | f60839eff156b1d0aa4b5889ec124357 | 4.17 | |
| 0x0ca8c000 | 0x0000c35a | 0x00007257 | f30e9390363769b02e28f19d324e0f54 | 7.93 | |
| 0x0ca99000 | 0x00047ec9 | 0x0000a563 | 66841e16f6d3fbc3898fe5c6d4db8dba | 7.92 | |
| .exports | 0x0cae1000 | 0x00001000 | 0x00000200 | 4c396cca9cefb34256321b992fabd391 | 1.55 |
| .imports | 0x0cae2000 | 0x00001000 | 0x00001000 | 17689b44593963b4450f4e8d46f05b15 | 4.61 |
| .tls | 0x0cae3000 | 0x0000e000 | 0x0000d800 | f9a211281cef04dcc7cac902dc1e50a8 | 0.00 |
| .rsrc | 0x0caf1000 | 0x0003be00 | 0x0003be00 | 27fc2d2415dba160b828e5687f64bd2d | 4.43 |
| .winlice | 0x0cb2d000 | 0x00d48000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .boot | 0x0d875000 | 0x00825600 | 0x00825549 | 66ce9348696f750dac21e1c3794b4ddc | 7.92 |
