GTAIV.exe Trojan Heuristic Analysis
| Online Virus Checker | v.1.0.175.174 |
| DB Version: | 2024-05-08 23:00:22 |
Trojan.Heur!.01092031
The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.
| File | GTAIV.exe |
| Checked | 2024-05-08 23:28:50 |
| MD5 | 193aea5d3726529c3197a289b9786fbf |
| SHA1 | 32a3f889f9fcc572ea798213f2e9eb429eb0c9a3 |
| SHA256 | 9bdbe9132c1bbf74f98bf5cb180933e423986a0830b4fb503340149c96158cd4 |
| SHA512 | b1d6d94933718158169b13670a0d4e6ea640fbe5f7e73024b9cb8ed69557adbb8a23a86d5773ce9f777091fa282351e57552780aaefcf1982a08a6cf402f3ec7 |
| Imphash | 2ebea460b4b39cc1cb405ceee1bd6f4c |
| File Size | 17425752 bytes |
Trojan.Heur!.01092031 Removal
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.01092031 without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| CompanyName | Rockstar Games |
| FileDescription | Grand Theft Auto IV |
| FileVersion | 1.2.0.59 |
| InternalName | Grand Theft Auto IV |
| LegalCopyright | Copyright (C) 2020 |
| OriginalFilename | GTAIV.exe |
| ProductName | Grand Theft Auto IV |
| ProductVersion | 1.2.0.59 |
| Translation | 0x0409 0x04b0 |
Portable Executable Info
 |
9baae78e54a6b6ece546dc74b32e8cfe c6d1ff89b08ca9dcc615745a99c68c49 0015696b3b133300 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00df922b |
| Compilation: | 2023-01-27 15:01:09 |
| Checksum: | 0x010ad6a0 (Actual: 0x010a1e9c) |
| OS Version: | 6.0 |
| PDB Path: | x:\gta\build\GTA4_Win32_Final.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The expected hash does not match the digest in SpcInfo |
| Sections: | 9 |
| Imports: | USER32, PSAPI, binkw32, VERSION, DSOUND, WS2_32, d3d9, RPCRT4, CRYPT32, SHLWAPI, WMVCore, WINMM, POWRPROF, KERNEL32, GDI32, ADVAPI32, SHELL32, ole32, OLEAUT32, DINPUT8, WINTRUST, |
| Exports: | 0 |
| Resources: | 11 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00a71efa | 0x00a72000 | cacd6f62237ec18f49b9e74b02d3ff09 | 6.49 |
| .rdata | 0x00a73000 | 0x001bcb03 | 0x001bcc00 | d325150b5b30175d677eb7ddbacb4ffa | 5.52 |
| .data | 0x00c30000 | 0x00c6b52c | 0x00124200 | 7f42e8001406ab68cbe6894e98e54ee2 | 5.07 |
| .tls | 0x0189c000 | 0x000008f1 | 0x00000a00 | 67e9050e7b0a48cdecfef2a060b35359 | 0.00 |
| _RDATA | 0x0189d000 | 0x000016e0 | 0x00001800 | 1b5271fe979431400cce11596ea83303 | 6.01 |
| .rsrc | 0x0189f000 | 0x00115cb0 | 0x00115e00 | 75f2820959bc30a1e62a4dccb0e03797 | 7.80 |
| .reloc | 0x019b5000 | 0x00135b6c | 0x00135c00 | 33983b1174c3d6327ff85c34a8ddd1b9 | 4.12 |
| .rkstr | 0x01aeb000 | 0x00000291 | 0x00000400 | d2e80da21d27374c11437ca9df6e1be3 | 4.36 |
| .tbm | 0x01aec000 | 0x000fb000 | 0x000fb000 | f60ddb9794c11d4d3bf10b519a24fdcc | 8.00 |
