MinecraftCloneButBetter.exe Trojan Heuristic Analysis
| Online Virus Checker | v.1.0.181.174 |
| DB Version: | 2024-07-02 04:00:28 |
Trojan.Heur!.02252123
The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.
| File | MinecraftCloneButBetter.exe |
| Checked | 2024-07-02 01:09:16 |
| MD5 | a5d2c2c2be5da70707a8dd09b700f4c4 |
| SHA1 | 03e7c4d6c0640a17111a30974766103bfb3809ef |
| SHA256 | d16e37b8a95c45fd326438226f1c49a989be6a0bcb1689d7ad301d32b0023f88 |
| SHA512 | 7a0eceaff44688d752056605b9ed6a650c99c8f8f248186acc1196b2600b59968ee01e0dd5121bb72a5ab12144549e5f1f1110d1ef8acf9c304d782cedb1881a |
| Imphash | 843799c8272e7b94f1dd139f92843e1a |
| File Size | 69002720 bytes |
Trojan.Heur!.02252123 Removal
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02252123 without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| CompanyName | Godot Engine |
| FileDescription | Godot Engine |
| FileVersion | 1.0.0.0 |
| ProductName | Godot Engine |
| Licence | MIT |
| LegalCopyright | Copyright (c) 2007-2024 Juan Linietsky, Ariel Manzur and contributors |
| Info | https://godotengine.org |
| ProductVersion | 1.0.0.0 |
| Translation | 0x0409 0x04b0 |
Portable Executable Info
 |
957485ef5682c3b6b78ce2cd3e6ce8b9 96b251ec3f5a62a487fea920646f422b 55e8e8ccd4cce817 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x1400013d0 |
| Compilation: | 1970-01-01 00:00:00 |
| Checksum: | 0x041c6040 (Actual: 0x041d6ac8) |
| OS Version: | 4.0 |
| PEiD: | PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 13 |
| Imports: | ADVAPI32, AVRT, bcrypt, CRYPT32, dbghelp, DINPUT8, dwmapi, DWrite, dxgi, GDI32, IMM32, IPHLPAPI, KERNEL32, msvcrt, ntdll, ole32, OLEAUT32, SHELL32, USER32, WINMM, WS2_32, WSOCK32, |
| Exports: | 18 |
| Resources: | 9 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x034b7b88 | 0x034b7c00 | e238de824532ac90eb231c206d840800 | 6.26 |
| .data | 0x034b9000 | 0x0004b2c0 | 0x0004b400 | db38a71c9715b5ce1eb72d5f83db99ff | 1.78 |
| .rdata | 0x03505000 | 0x009b4510 | 0x009b4600 | d88740d78721e0d51a40c76ad67fdccc | 6.14 |
| pck | 0x03eba000 | 0x00000008 | 0x00022be0 | f56033a6149bdc70d5c9636c94769e4a | 7.05 |
| .pdata | 0x03ebb000 | 0x001287cc | 0x00128800 | bfc2efb1fa4301a34e85c3fa12f02121 | 7.02 |
| .xdata | 0x03fe4000 | 0x001625b0 | 0x00162600 | d74fa7567e4ecb48cdc2db5042f0d5ab | 4.91 |
| .bss | 0x04147000 | 0x001b38e0 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
| .edata | 0x042fb000 | 0x00000446 | 0x00000600 | 343de350b3e61fc69e65a5e9ac4fcf67 | 4.53 |
| .idata | 0x042fc000 | 0x00004f88 | 0x00005000 | b30b6f624b5d4ff7bf36aa72685efb13 | 5.03 |
| .CRT | 0x04301000 | 0x00000070 | 0x00000200 | 0bee4e3cdd0c6ce87eb08cff25f42414 | 0.48 |
| .tls | 0x04302000 | 0x00000010 | 0x00000200 | bf619eac0cdf3f68d496ea9344137e8b | 0.00 |
| .rsrc | 0x04303000 | 0x0000b138 | 0x0000b200 | e282ba94a77445f0ccf4b5a1f61b4c9e | 7.93 |
| .reloc | 0x0430f000 | 0x0005827c | 0x00058400 | aeec30d37e4146af28983641f7926d8b | 5.46 |
