how it works in detail the heuristic analysis?

can you help me?

Heuristic analysis consist of file inspection methods that help to make a "guess" as to whether or not a file contains a virus/malware. Each antivirus program has its own methods of heuristic analysis. Heuristic analysis is different than scanning a file for a virus signature. Most AVs use both signatures and heuristic analysis. Some AVs also use other methods--such as file emulation and generic signatures.

Regards,

what are the static heuristic and dinamic heuristic?

Static heuristic methods are used on the file without executing it to see if it has malicious characteristics. They look at the file header and other items.

Dynamic heuristic methods are used while the file is executing to see if it has malicious characteristics. Some AVs will emulate the file, and others will use a sandbox.

Regards,