Gridinsoft Logo

The Fer3onFL84_[unknowncheats.me]_.exe File Analysis

Updated 24 days ago
Checked by Malaware Check
Fer3onFL84_[unknowncheats.me]_.exe

Technical Analysis

File Name Fer3onFL84_[unknowncheats.me]_.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
12288:Y2UwqlNQTyoNxGNTZL2qMvIUxCj2AqeMQmzn:Y2hTyoDGNTZyqMvIuGKFzn
Scanner Version 1.0.216.174
Database Version 2025-05-14 04:00:42 UTC
⚠

Suspicious File Detected

Detected by 44 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
61%
Detection Rate
755,712
File Size (bytes)
44/72
Engines Detected
2025-05-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
49c4bf27c70c5392f3c53fff30d0bb01
SHA1
295c19a9931647164536a4c52bb372bf6488416f
SHA256
1ba2d4e9fb39253c2eea5b47d61766a0e4b085dadae129f48af0620b4715aa2c
SHA512
a3af094202e524097728bbdce9f90826e18a7492d73f6c8dc1104ada0706556b0ffbc8cb3f328630cec428852388a6c17d60e630c9087d6468bfbca25c398df9
ImpHash
7645e1b0c0789886f18f5161599abc87

Security Engines with Detections (44 of 72)

Bkav
W64.AIDetectMalware Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
Trojan.Generic.37937976 Malicious
CTX
exe.trojan.agen Malicious
CAT-QuickHeal
Trojan.Agent Malicious
Skyhigh
BehavesLike.Win64.Generic.bh Malicious
McAfee
Artemis!49C4BF27C70C Malicious
Malwarebytes
Malware.AI.2856809262 Malicious
Sangfor
Trojan.Win32.Save.a Malicious
K7AntiVirus
Trojan ( 005960bf1 ) Malicious
K7GW
Trojan ( 005960bf1 ) Malicious
CrowdStrike
win/malicious_confidence_90% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of Win64/Agent_AGen.HM Malicious
APEX
Malicious Malicious
TrendMicro-HouseCall
TROJ_GEN.R002C0DDQ25 Malicious
BitDefender
Trojan.Generic.37937976 Malicious
Avast
Win64:MalwareX-gen [Misc] Malicious
Tencent
Malware.Win32.Gencirc.11e0296e Malicious
Emsisoft
Trojan.Generic.37937976 (B) Malicious
Google
Detected Malicious
F-Secure
Trojan.TR/Agent_AGen.hapnv Malicious
DrWeb
Tool.VulnDriver.22 Malicious
VIPRE
Trojan.Generic.37937976 Malicious
TrendMicro
TROJ_GEN.R002C0DDQ25 Malicious
McAfeeD
ti!1BA2D4E9FB39 Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.Win64.Krypt Malicious
GData
Trojan.Generic.37937976 Malicious
Avira
TR/Agent_AGen.hapnv Malicious
Antiy-AVL
Trojan/Win64.Agent Malicious
Arcabit
Trojan.Generic.D242E338 Malicious
Microsoft
Trojan:Win32/Kepavll!rfn Malicious
Cynet
Malicious (score: 100) Malicious
AhnLab-V3
Trojan/Win.Krypt.C5755820 Malicious
ALYac
Trojan.Generic.37937976 Malicious
Cylance
Unsafe Malicious
Rising
Trojan.Agent!8.B1E (CLOUD) Malicious
SentinelOne
Static AI - Malicious PE Malicious
MaxSecure
Trojan.Malware.324995110.susgen Malicious
Fortinet
W64/Agent_AGen.HM!tr Malicious
AVG
Win64:MalwareX-gen [Misc] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
Trojan:Win/Agent_AGen.HZ Malicious
28 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x14007057c
Compilation Time 2025-04-22 10:40:22
Checksum 0x00000000 (Actual: 0x000ba4db)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path D:\Hax\Cheat Files\Fer3onFL84\Build\Fer3onFL84.pdb
Digital Signature No valid SignedData structure was found.
Imports 22 libraries
Exports 0 functions
Resources 1 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 469,968 bytes 470,016 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C5B35985D0D84C1708F59554477D5D14
.rdata 0x00074000 263,566 bytes 263,680 bytes 6.86 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4F29AFA4F5F93387F66A2E96F60142B6
.data 0x000b5000 5,784 bytes 2,560 bytes 3.85 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6DC2F8C6172A8221E7BB3D77393AB380
.pdata 0x000b7000 16,428 bytes 16,896 bytes 5.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D1046ED16C556AA1CB9FE7DC40F0A895
.rsrc 0x000bc000 488 bytes 512 bytes 4.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D0614F8891B2789BCC1134CF5D9873F5
.reloc 0x000bd000 784 bytes 1,024 bytes 4.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A0BAE6BC0AD345F3EEFE244FAAB22BAF
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1 (392 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 392 bytes
100%

Certificate Chain Analysis

▼
Certificate Information
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Intel Corporation #3 Chain
Validity Period: 2012-05-17 00:00:00 → 2015-05-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 27 76 AB 5C F2 D0 98 72 F1 AD 05 FB C3 F2 1A 87
VeriSign Class 3 Public Primary Certification Authority - G5 #4 Chain
Validity Period: 2011-02-22 19:25:17 → 2021-02-22 19:35:17
Signature Algorithm: sha1RSA
Serial Number: 61 19 93 E4 00 00 00 00 00 1C

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
44 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware