Gridinsoft Logo
File Icon

FLEngine_x64.dll Trojan Heuristic Analysis

Updated 3 days ago
Checked by Malware Check
FLEngine_x64.dll

Technical Analysis

File Name FLEngine_x64.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.223.174
Database Version 2025-08-11 23:00:18 UTC
⚠

Trojan.Heur!.01212032

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
64,593,208
File Size (bytes)
2025-08-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
c911f9061f163cb8224b0a119cba7538
SHA1
e2aa7b59189e7a6a8deab84d409c1d93b070a381
SHA256
dc2f295dd7b2d7f817faea0bca3b06426c13598e0ab0a52127b89099450a21f9
SHA512
ef45cd09d161ece995c0e946dabe53d4c79e24d135c34cedfc696bc127d2a29f171c90ccdf287614f466997d39a251f8be1eedb6e95d00febfc13da2d644dbce
ImpHash
910c6b31aa4a92b5c49dc84ae0ab18da

PE Analysis

Basic Information

▼
Icon
Hash: 0ae26ef28b4d6932e1e5c1be6e312dfe
Fuzzy: 65c101bdf2d311ed3fbfd74fba495bcb
dHash: f8f87879793998e8
Image Base 0x00400000
Entry Point 0x03f00827
Compilation Time 2024-12-13 15:10:33
Checksum 0x03d9f619 (Actual: 0x03da7c75)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 23 libraries
Exports 3 functions
Resources 320 Resources
Sections 18 Sections

Version Information

▼
CompanyName Image-Line
FileDescription FL Studio engine
FileVersion 24.2.1.4526
InternalName FL Studio
LegalCopyright Copyright (c) 1997-2024 by Image-Line. All rights reserved.
ProductName FL Studio
ProductVersion 24.2.1.4526
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 14,981,292 bytes 14,981,632 bytes 6.09 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D013D885641A579FE34E7AF826FDF511
.data 0x00e4b000 2,027,032 bytes 2,027,520 bytes 6.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0D35B55B7CC8ED931376AE2C28CB53AA
.bss 0x0103a000 1,294,568 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x01177000 26,278 bytes 26,624 bytes 7.20 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 644C968F75424F6AADD0488BC1ABB42B
.didata 0x0117e000 5,166 bytes 5,632 bytes 3.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E25C8DDA3CF5CD57315CF367FAAA005A
.edata 0x01180000 148 bytes 512 bytes 1.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7B092BCA37A8BB70C668E813FE139305
.rdata 0x01181000 69 bytes 512 bytes 1.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C16EC4A7734718176FC9E415E44BE24D
.xda0 0x01182000 504,544 bytes 504,832 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3939C4DB850D8EDBFA6185F27EDCF368
.pdata 0x011fe000 614,868 bytes 614,912 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C5A4F823A687328A7D14763483F1FD44
.xda1 0x01295000 38,799,040 bytes 38,796,288 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1E47406EB69F74B2CDCCC50127F55CA2
.xda1 0x03796000 1,987,367 bytes 1,987,584 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 499EF26A8BA041A2BAFDB0BE824F328F
.xda0 0x0397c000 504,760 bytes 504,832 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FF4C088E241CDFE39431DE24D735EF34
.wd 0x039f8000 7 bytes 7 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D310A40483F9399DD7ED1712E0FDD702
.xda2 0x039f9000 781,141 bytes 781,312 bytes 7.31 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8127142BF2735C66292408EFB43707F1
.xda3 0x03ab8000 7,768 bytes 8,192 bytes 3.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6B501BE35B567F9A6C6D8DC99977E922
.xda4 0x03aba000 1,839,192 bytes 1,839,616 bytes 7.43 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7C7805FD99DC3540B8CF79EF2DC31C09
.reloc 0x03c7c000 516,124 bytes 516,608 bytes 6.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8B0B5230DA3002B4670128D05719C775
.rsrc 0x03cfb000 1,987,367 bytes 1,987,584 bytes 6.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 386A02D1D7110B750F8A7BE6B675B47B
Entropy Analysis Alert

5 section(s) with high entropy (≥7.5) detected - possible packing/encryption

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 320 (1,965,759 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 60 154,880 bytes
7.9%
RT_BITMAP 25 44,750 bytes
2.3%
RT_ICON 13 100,055 bytes
5.1%
RT_DIALOG 1 82 bytes
0%
RT_STRING 40 39,232 bytes
2%
RT_RCDATA 121 1,623,209 bytes
82.6%
RT_GROUP_CURSOR 57 1,140 bytes
0.1%
RT_GROUP_ICON 1 188 bytes
0%
RT_VERSION 1 728 bytes
0%
RT_MANIFEST 1 1,495 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.01212032 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.01212032 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware