| Online Virus Checker | v.1.0.212.174 |
| DB Version: | 2025-04-02 14:00:33 |
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | USD 80,000.exe |
| Checked | 2025-04-02 11:32:02 |
| MD5 | efd051bf32cdc62fbf74971ea18de94e |
| SHA1 | c5f89f5e0a27e28b79ac720b4ab28758388cfd1a |
| SHA256 | 7c893ff9b246be201d682784f00ed462f821188090d473839ba389f8e9b778aa |
| SHA512 | e7ff8ecfebdf95754ad11de327c8624c11d6f93292b12d2d2eabf554063233e9b3efbde549bce65662940d38c15b071271d7597a295aa13921ab5f523c8fd61a |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 1089536 bytes |
Gridinsoft has the capability to identify and eliminate Spy.Win32.Gen.tr without requiring further user intervention.
| Translation | 0x0000 0x04b0 |
| Comments | |
| CompanyName | |
| FileDescription | Fations |
| FileVersion | 1.0.0.0 |
| InternalName | Fations.exe |
| LegalCopyright | Copyright © 2025 |
| LegalTrademarks | |
| OriginalFilename | Fations.exe |
| ProductName | Fations |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0050b4de |
| Compilation: | 2084-09-06 07:24:22 |
| Checksum: | 0x00000000 (Actual: 0x0010c07b) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 3 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 2 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00002000 | 0x001094e4 | 0x00109600 | e5907eafccb851dda22a1e9a69c7cac1 | 7.68 |
| .rsrc | 0x0010c000 | 0x00000596 | 0x00000600 | b7b6ac8e2cebdebd45f420ca92a3e22b | 4.04 |
| .reloc | 0x0010e000 | 0x0000000c | 0x00000200 | bc76577f0aa517845cc04bc5d6d5402d | 0.10 |
