FExportView.dll Trojan Heuristic Analysis

Trojan Heuristic

Updated on 2024-09-17 (3 days ago)

Online Virus Checker	v.1.0.188.174
DB Version:	2024-09-17 20:07:06

Trojan.Heur!.02290022

The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.

File	FExportView.dll
Checked	2024-09-17 18:04:11
MD5	e62353b78dbcd396a293c0dc91ad830c
SHA1	8ab01a99270ab82171b434153882237e11996128
SHA256	4fc034de654c52075208b6ddc394e6605f9ba1f100b49454751c671b8a9eb175
SHA512	dfa9b55d392eb787f60de8aea76801d53e39cb6a89c1506354873df53f7e61f5a11b173f7e89d22c996886f88f3830c61bfa3cc1a91fc27ae401cba3503b43a6
Imphash	48b36fe258d5b66a2fce82e90d1cfba1
File Size	7155200 bytes

Trojan.Heur!.02290022 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02290022 without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

CompanyName	Wondershare
FileDescription	FExportView
FileVersion	13, 6, 4, 8382
InternalName	FExportView
LegalCopyright	Copyright (c) 2020-2024 Wondershare. All rights reserved.
OriginalFilename	FExportView
ProductName	FExportView
ProductVersion	13.6.4.8382
Translation	0x0804 0x04b0

Portable Executable Info

	a4c09c4859e5ebf0c25d5741e4dcf096 f3a8cd694b22d7e9f267a395d00d9ba9 c69a727219ccb2b2
Image Base:	0x180000000
Entry Point:	0x180c03091
Compilation:	2024-07-22 14:35:55
Checksum:	0x006d953f (Actual: 0x006d953f)
OS Version:	6.0
PEiD:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	9
Imports:	Qt5Gui, Qt5Xml, FCommonView, FFCloudDisk, WsAP-FilmoraX, Qt5Core, FCore, FFIPC, FFAppSettings, FUserGuide, FFAppLicense, FFWsAP, FFVBLModel, FFWidgets, FFFilmoraCore, FFCore, KERNEL32, USER32, ole32, OLEAUT32, MSVCP140, VCRUNTIME140, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-math-l1-1-0,
Exports:	331
Resources:	12

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00001000	0x001ed800	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.rdata	0x001ef000	0x00278632	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.data	0x00468000	0x00006b70	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.pdata	0x0046f000	0x00015e10	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.5N80	0x00485000	0x00261e26	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.5N81	0x006e7000	0x00004fa0	0x00005000	8d084ac53a9d2f4523c4cfe1eb4ac31b	3.50
.5N82	0x006ec000	0x0069d65c	0x0069d800	d3232bec1ddc35e46be23f6cd9646826	7.92
.reloc	0x00d8a000	0x000000ec	0x00000200	28fcaddbb84db12ef1401a43ea1ac400	2.12
.rsrc	0x00d8b000	0x0002fefd	0x00030000	9c6f4f18499fda7c2291978290ce2d06	5.95