ff7_fr.exe

MD5:
24f9b5840cde7dfc61f797e2d987a728

SHA-1:
50aa25e30b60219c7cb34c1dd43506046a8c5dbc

SHA-256:
f6e98de8538e6670410e4f709d2e4e192e3527c8c350377687726603d039d1ba

Scanner detections:
10 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/19/2025 10:52:54 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Suspicious
7.1.1

Bkav FE
W32.HfsAutoB
1.3.0.4923

Comodo Security
UnclassifiedMalware
17641

McAfee
Artemis!24F9B5840CDE
5600.7228

Norman
Suspicious_Gen4.AVHCZ
11.20140205

Panda Antivirus
Trj/OCJ.A
14.02.05.04

Sophos
Mal/Generic-S
4.96

Trend Micro House Call
TROJ_SPNR.0BI612
7.2.36

Trend Micro
TROJ_SPNR.0BI612
10.465.05

VIPRE Antivirus
Trojan.Packed.NsAnti
25596

File size:
5.7 MB (6,007,808 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\square enix\final fantasy vii\ff7_fr.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.10

CTPH (ssdeep):
98304:U4c0A7I3k9Kt3+w3sCjoJlqPJq9sEqsM6dTOtwT/3K1oZWZ5r+QWz6b:1m7Ik9k38CkJlqIsEtM6dTOaT/3K1oZI

Entry address:
0xB71030

Entry point:
E8, AC, 00, 00, 00, 1C, 61, 7B, 00, 10, 61, 7B, 00, 52, 4C, 44, 21, 5E, CA, 4D, 22, E9, 7C, 0A, A8, E4, E9, A5, D9, 4A, B1, E8, 13, 2B, 3B, 9E, E9, 70, 09, DF, 74, E9, EE, 0E, C0, 86, E8, 27, A4, 0B, C6, E8, AA, 6A, 28, 96, E9, 65, 4E, 02, 7F, E8, CA, CA, 2C, E3, E9, 34, 2B, 66, 02, E9, D1, 26, BC, E5, E9, 11, 55, 63, 5E, E9, 72, C4, 2A, AC, E8, 5F, 5F, BC, 40, E9, 38, 55, 25, A1, E8, ED, 60, AA, C8, E9, 14, D7, 43, E2, E8, DF, D7, B5, B4, E8, 91, 9C, 10, 4B, E8, BB, C2, 7B, 72, E9, BB, A3, 68, CE, E8, 0B...
 
[+]

Entropy:
7.4410

Code size:
3.7 MB (3,888,128 bytes)

The file ff7_fr.exe has been discovered within the following program.

FINAL FANTASY VII  by Square Enix
Publisher's description - “Mako—the discovery of this natural resource drawn directly from the planet’s life force marked the dawn of a new era, and now the energy sustains the lives of people across the world.”
finalfantasyviipc.com/us
9% remove it
 
Powered by Should I Remove It?

Scan ff7_fr.exe - Powered by Reason Core Security