Strike-force-heroes-2.exe Trojan Heuristic Analysis

Trojan Heuristic

Updated on 2024-07-08 (3 months ago)

Online Virus Checker	v.1.0.181.174
DB Version:	2024-07-08 19:00:32

Trojan.Heur!.03292061

The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.

File	strike-force-heroes-2.exe
Checked	2024-07-08 16:21:47
MD5	d1e8084e1f3d5ca45642836777fe618d
SHA1	6bb8f170af9a5e5c5695eb06094908dcd01788d4
SHA256	284da1cda2ee4991401a9630b8e5e2cbd6266bca1d81c7fed172181ecd50338a
SHA512	91666e566a67ef990de8507c22bd6fa3eb51867192cecdbbfaf04e400c1e3886fabdde435e805dbee3ddccb0b8f7df74ca2dcc46055f5ad9c77325981b686bbd
Imphash	dc19ea9c3e4eff686ba236517fc7fdd1
File Size	19910563 bytes

Trojan.Heur!.03292061 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.03292061 without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

Company	Trong® Corporation
FileDescription	Flash Player 11
FileVersion	11.4.402.278
InternalName	Trong® Flash® Player® 11
LegalCopyright	© Trong® Corporation. All rights reserved.
LegalTrademarks	Trong Flash Player
OriginalFilename	FlashPlayer.exe
ProductName	Shockwave Flash
ProductVersion	11.4.402.278
Website	wWw.Trong.Tk
Translation	0x0409 0x04b0

Portable Executable Info

	2affaed2080569a905583c9459424a37 8faf76c3fb694738c5cfbe91c3dfbd73 c0a4a4e42434b250
Image Base:	0x00400000
Entry Point:	0x00d681d0
Compilation:	2012-09-16 23:15:58
Checksum:	0x00000000 (Actual: 0x0130bf2a)
OS Version:	5.0
PEiD:	PE32 executable (GUI) Intel 80386, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	3
Imports:	KERNEL32, ADVAPI32, COMDLG32, CRYPT32, DSOUND, GDI32, mscms, ole32, OLEAUT32, SHELL32, urlmon, USER32, VERSION, WININET, WINMM, WS2_32,
Exports:	0
Resources:	66

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
PFV0	0x00001000	0x0060a000	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
PFV1	0x0060b000	0x0035e000	0x0035d200	080dee08c57beb7648a1811e6f91f25c	7.94
.rsrc	0x00969000	0x00006000	0x00005200	596ae8e9fd3d17e64996cb2aa0249632	5.46