Touch.exe Trojan Heuristic Analysis
| Online Virus Checker | v.1.0.177.174 |
| DB Version: | 2024-05-23 23:00:19 |
Trojan.Heur!.022121A1
The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.
| File | touch.exe |
| Checked | 2024-05-23 20:40:23 |
| MD5 | b570396f63b438c222a883ac823e361a |
| SHA1 | cb5a26133a31d2f0f7bf2326bec54776ca8fb75e |
| SHA256 | 597a505e2f370219a2e25b53321a54b2fd3cfc203237f654eb8771dd6facb740 |
| SHA512 | 990e3c362a0a90adbc919d437d8444f6515eb8ba11f7ff63f5b65b7527e7f5bff8e54defb48f1c3b826b79c11fd667fe13567021be0892f08073ed4d788913df |
| Imphash | fa8b88822aebcf18c2f12859087c4378 |
| File Size | 23412 bytes |
Trojan.Heur!.022121A1 Removal
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.022121A1 without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
| Image Base: | 0x00400000 |
| Entry Point: | 0x0040c00c |
| Compilation: | 1998-05-01 21:45:25 |
| Checksum: | 0x00000000 (Actual: 0x0000635f) |
| OS Version: | 4.0 |
| PEiD: | MS-DOS executable PE32 executable (console) Intel 80386, for MS Windows, MZ for MS-DOS |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 5 |
| Imports: | KERNEL32, crtdll, |
| Exports: | 0 |
| Resources: | 0 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00007f80 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .data | 0x00009000 | 0x00000044 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .bss | 0x0000a000 | 0x00000188 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .idata | 0x0000b000 | 0x000005a0 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .s | 0x0000c000 | 0x00007e68 | 0x00005974 | a96cd14e25c611e5b58103499f2b1dc6 | 7.89 |
