| Online Virus Checker | v.1.0.181.174 |
| DB Version: | 2024-07-08 21:00:29 |
The "Heur" stands for "heuristic," which means we use a set of rules, algorithms, or behavioral analysis to detect potential threats that may not have a specific, known signature. It's a proactive approach to identifying suspicious behavior or code patterns that could indicate the presence of a Trojan or other malware. The file's behavior or characteristics triggered the heuristic analysis as potentially malicious. However, it doesn't necessarily confirm that the file is indeed a Trojan. It could be a false positive, where a legitimate program exhibits behavior that resembles malicious activity.
| File | xlup.vmp_protected.exe |
| Checked | 2024-07-08 18:53:18 |
| MD5 | 1b4af404b512d75626be383ca4287878 |
| SHA1 | 1c75b81a481ce34255ad53b1144a74539466450b |
| SHA256 | f8e3722e99383809a99dc81deef534fdb23bc1ac22272a051103494df4ec410a |
| SHA512 | 9985e64c7039ae979df4ac9b137c8be4ff65e9d8bdc393dab5e9af24768b26ce370c7b412b95f30ebc0572a382e645b4ac0ec5bfa9be21b6d3bd5c67d33edf4a |
| Imphash | 2e5467cba76f44a088d39f78c5e807b6 |
| File Size | 1364992 bytes |
Gridinsoft has the capability to identify and eliminate Trojan.Heur!.032120A1 without requiring further user intervention.
| Image Base: | 0x00400000 |
| Entry Point: | 0x007f558c |
| Compilation: | 2024-07-08 18:41:26 |
| Checksum: | 0x00000000 (Actual: 0x0014feca) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | kernel32, user32, advapi32, oleaut32, gdi32, shell32, version, mscoree, |
| Exports: | 0 |
| Resources: | 0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| 0x00002000 | 0x00018000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x0001a000 | 0x00028000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x00042000 | 0x00050000 | 0x0003de00 | 310c82f8b46cf99fcb41c0ff7edbb58b | 8.00 | |
| 0x00092000 | 0x00002000 | 0x00000200 | 3f38e91e7691b4260eea5b49b14b3962 | 0.34 | |
| 0x00094000 | 0x00280000 | 0x0002ba00 | cc52105ddb8d20c1a7da3b182e6340b3 | 8.00 | |
| .xlupik | 0x00314000 | 0x000e4000 | 0x000e3600 | 687ae1ee741ba1041b641c9df5934b15 | 7.99 |
