ZBrush2022.0.7 Trojan Heuristic Analysis

Trojan Heuristic

Updated on 2023-09-19 (1 year ago)

Online Virus Checker	v.1.0.139.174
DB Version:	2023-09-19 12:03:08

Trojan.Heur!.03212063

The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.

File	ZBrush2022.0.7
Checked	2023-09-19 09:51:21
MD5	e20d11b745898a8ef1071f65665a04bf
SHA1	82b808418d6ff3ad9fe073f688d815945fe839c8
SHA256	c1d6a87c02457a7a5084bbec04f07689bcb91d94f2b90d6f42ce6e7090189beb
SHA512	8d4e7465304ffc2f2808b89123e08298b907afa18be0af506e2750093f5271e28343e98e7b745f3fda28b0df4943853162de553ffbac7e118fa547fb240c8491
Imphash	a5a88fcdfdbadb6f635ce5ab9e25e385
File Size	42368048 bytes

Trojan.Heur!.03212063 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.03212063 without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

CompanyName	Maxon Computer GmbH
FileDescription	ZBrush Executable
FileVersion	2022, 0, 7, 0
InternalName	ZBrush2022.0.7
LegalCopyright	Copyright © 2022 Maxon Computer GmbH. Developed By Ofer Alon.
LegalTrademarks	Maxon and the Maxon logo, ZBrush and the ZBrush logo, ZBrushCore, and the ZBrushCore logo are trademarks of Maxon Computer GmbH.
OriginalFilename	ZBrush.exe
ProductName	ZBrush
ProductVersion	2022, 0, 7, 0
Translation	0x0409 0x04b0

Portable Executable Info

Image Base:	0x140000000
Entry Point:	0x15202a250
Compilation:	2022-12-09 15:24:49
Checksum:	0x00000000 (Actual: 0x0286f9c2)
OS Version:	6.0
PEiD:	PE32+ executable (GUI) x86-64, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	3
Imports:	ADVAPI32, api-ms-win-crt-convert-l1-1-0, api-ms-win-crt-filesystem-l1-1-0, api-ms-win-crt-heap-l1-1-0, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-math-l1-1-0, api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-stdio-l1-1-0, api-ms-win-crt-string-l1-1-0, api-ms-win-crt-time-l1-1-0, api-ms-win-crt-utility-l1-1-0, bcrypt, COMDLG32, CRYPT32, fmodex64, GDI32, gdiplus, GLU32, IPHLPAPI, KERNEL32, ole32, ompp, SHELL32, SHLWAPI, USER32, VCOMP140, VCRUNTIME140, WININET, WINMM,
Exports:	0
Resources:	117

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
....	0x00001000	0x0f7d9000	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
....	0x0f7da000	0x02851000	0x02850600	0e7e841bac97cc51c589ea642624a7f1	7.90
.rsrc	0x1202b000	0x00015000	0x00015000	ce06a812f3c85e620aaaff7a060901dd	5.75