Absolum exe Trojan Heuristic File Malware Analysis: 4f5cf4b42b0015c0c7ee0b07cf6a35d1
Gridinsoft Logo
File Icon

Absolum.exe Trojan Heuristic Analysis

Updated 3 days ago
Checked by Malware Check
Absolum.exe

Technical Analysis

File Name Absolum.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.228.174
Database Version 2025-10-27 11:00:18 UTC
⚠

Trojan.Heur!.02056023

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
36,779,592
File Size (bytes)
2025-10-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4f5cf4b42b0015c0c7ee0b07cf6a35d1
SHA1
1edefe5545fa194ee5e6e076825bdb4b11213fb7
SHA256
9cdc697358bf31e8b54a7ff11af12a22deb9ebd2593a3b5ebe3b16fd28ab2e01
SHA512
a157c19b80261a750ca579000ade73682e0afcc51844b81af513f231d58f87597c97d63e96fd38fad5987016cdb79d00cd58814633763fc5e464b0e85195580b
ImpHash
3c2420f511ed0e66d576ebc6f855cbe4

PE Analysis

Basic Information

▼
Icon
Hash: e64491f29cf532276f95426c1b1e0164
Fuzzy: de9fecacb531b2b6fc86049d139fa29e
dHash: 109010f0f0103010
Image Base 0x140000000
Entry Point 0x140088cc8
Compilation Time 2025-10-02 13:08:31
Checksum 0x00000000 (Actual: 0x02322f93)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\Users\Miaouss\Documents\Wof\.bin\.bin.Retail\win-x64\native\Absolum.pdb
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
ADVAPI32, bcrypt, IPHLPAPI, KERNEL32, ole32, USER32, WS2_32
Exports 1 functions
Resources 12 Resources
Sections 9 Sections

Version Information

▼
Translation 0x0000 0x04b0
CompanyName Absolum
FileDescription Absolum
FileVersion 1.0.0.0
InternalName Absolum.dll
LegalCopyright
OriginalFilename Absolum.dll
ProductName Absolum
ProductVersion 1.0.0
Assembly Version 1.0.0.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 874,920 bytes 875,008 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B2ED3BAD8BA2C3A964D6A25C6A372B61
.managed 0x000d7000 17,844,872 bytes 17,845,248 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 745FA544726EDB3E77EC1F94FCCE0001
.rdata 0x011dc000 14,791,832 bytes 14,792,192 bytes 6.70 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 76332744AC5DFAC7797808D69432BF75
.data 0x01ff8000 1,105,904 bytes 861,696 bytes 3.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9FCE71026396D0008C9B298BAC856786
.pdata 0x02106000 1,290,528 bytes 1,290,752 bytes 6.83 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C35172D845E4A9E7F2719EF03E798618
_RDATA 0x02242000 244 bytes 512 bytes 2.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FF23A100BFE262E5AAF795A26B332123
.rsrc 0x02243000 308,408 bytes 308,736 bytes 2.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BF9AAA4C12354005DDADD99E16D2E0EA
.reloc 0x0228f000 573,508 bytes 573,952 bytes 5.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 847AAE0598E3053F800743F8858FCF44
.bind 0x0231c000 230,472 bytes 230,472 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 02716DB4A4E8661345014EFB204854E5
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 12 (307,701 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 306,395 bytes
99.6%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 684 bytes
0.2%
RT_MANIFEST 1 490 bytes
0.2%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.02056023 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02056023 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware