Gridinsoft Logo
File Icon

FLEngine_x64_Copy5.dll Trojan Heuristic Analysis

Updated 11 months ago
Checked by Malaware Check
FLEngine_x64_Copy5.dll

Technical Analysis

File Name FLEngine_x64_Copy5.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.179.174
Database Version 2024-06-16 07:00:21 UTC
⚠

Trojan.Heur!.01210032

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
66,332,984
File Size (bytes)
2024-06-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
06bb6dde5c9adbac93470ed86ce7d5ff
SHA1
46fc43590d6d4c4f04f23ab0eb6f8f602e7e731a
SHA256
2a44a8af200c4ee36de4b0f91471ffca82ce25e0fe90401d64a9d4c01b9f9525
SHA512
5399dbdf1c523ae86956b3a774996cbe0276fb1ca08919564f7669e8cb695711dc9830cbf751cf4479d2bb08f982193c22e00a8be34c5466c9567287a45d8c23
ImpHash
c995c6a83354266523555dc8622edb0c

PE Analysis

Basic Information

▼
Icon
Hash: 0ae26ef28b4d6932e1e5c1be6e312dfe
Fuzzy: 65c101bdf2d311ed3fbfd74fba495bcb
dHash: f8f87879793998e8
Image Base 0x00400000
Entry Point 0x0415a454
Compilation Time 2024-02-05 14:03:41
Checksum 0x03f5080f (Actual: 0x03f5080f)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Digital Signature Chain verification from CN=Image Line (serial:-134698403968793511265905581838736896500, sha1:bbc705d3179ba1cdde5afb573345260b0fb6d31c) failed: The X.509 certificate provided is self-signed - "Common Name: Image Line"
Imports 23 libraries
Exports 4 functions
Resources 313 Resources
Sections 20 Sections

Version Information

▼
CompanyName Image-Line
FileDescription FL Studio engine
FileVersion 21.2.3.4004
InternalName FL Studio
LegalCopyright Copyright (c) 1997-2024 by Image-Line. All rights reserved.
ProductName FL Studio
ProductVersion 21.2.3.4004
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 13,972,700 bytes 13,972,992 bytes 6.08 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ FA3E6C23C4DDB61204029E45180C26FA
.data 0x00d55000 1,900,416 bytes 1,900,544 bytes 6.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FAE57E941715EC600A902FDCBE074C3C
.bss 0x00f25000 1,293,176 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x01061000 26,030 bytes 26,112 bytes 7.90 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B7ECF4DCE8C2A9777FF079A190340D52
.didata 0x01068000 4,592 bytes 4,608 bytes 3.54 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F9EE01F0540DB2F33A39D80A22A0E5F9
.edata 0x0106a000 189 bytes 512 bytes 2.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BCC2F2523748DEA72C5E6E4063DAA69C
.rdata 0x0106b000 69 bytes 512 bytes 1.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 19AB6A27AEE54F4CC5376359F1D9573B
.xda0 0x0106c000 468,224 bytes 468,480 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D602D8C282EFDBA331C1E0CE54738C3B
.pdata 0x010df000 572,988 bytes 573,440 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6D107F3F3F8A51E99059C45D165A898C
.xda1 0x0116b000 37,256,968 bytes 37,257,216 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A166BF416952605CE4D094AA5C5D2DDE
.xda2 0x034f3000 6,848 bytes 7,168 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D19A7495B0CA3BAB5DF98A19D8B3CB15
.xda3 0x034f5000 5,101,464 bytes 5,101,568 bytes 7.66 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F562AB6A498300051E11BD8A7A3F37FF
.xda0 0x039d3000 468,680 bytes 468,992 bytes 7.91 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FAD05F92623E1D206AD010424ED5CEEA
.xda1 0x03a46000 1,832,885 bytes 1,832,960 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F0DE6625E2653E2C305AD8AAA7FEE654
.xda0 0x03c06000 1,536 bytes 1,536 bytes 7.11 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 40365449C0B02B9A45816BA3C3E22D06
.xda2 0x03c07000 600,536 bytes 600,576 bytes 7.09 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 14109D880A5A0D79450C2C4098E84AAB
.xda3 0x03c9a000 2,176 bytes 2,560 bytes 2.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 414F6A2224A32ECD5A7213B61A7B4A7C
.xda4 0x03c9b000 1,791,452 bytes 1,791,488 bytes 7.47 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A141C5FC7E8B24F9CDCD2510C4BA0777
.reloc 0x03e51000 480,080 bytes 480,256 bytes 6.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 57BA22487132D3418BE629EA2F15CE48
.rsrc 0x03ec7000 1,832,885 bytes 1,832,960 bytes 6.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DE8BF6C30AA77D29CB7EC4C6F5BDA9F0
Entropy Analysis Alert

7 section(s) with high entropy (≥7.5) detected - possible packing/encryption

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 313 (1,811,797 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 60 154,880 bytes
8.5%
RT_BITMAP 25 44,750 bytes
2.5%
RT_ICON 13 100,055 bytes
5.5%
RT_DIALOG 1 82 bytes
0%
RT_STRING 39 38,196 bytes
2.1%
RT_RCDATA 115 1,470,581 bytes
81.2%
RT_GROUP_CURSOR 57 1,140 bytes
0.1%
RT_GROUP_ICON 1 188 bytes
0%
RT_VERSION 1 728 bytes
0%
RT_MANIFEST 1 1,197 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

Chain verification from CN=Image Line (serial:-134698403968793511265905581838736896500, sha1:bbc705d3179ba1cdde5afb573345260b0fb6d31c) failed: The X.509 certificate provided is self-signed - "Common Name: Image Line"

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.01210032 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.01210032 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware