home

ffinstonline.exe

App P2P Installer

Free Time Co., Ltd.

Publisher:
Free Time Co., Ltd.

Product:
App P2P Installer

Description:
Format Factory Online Installer

Version:
1.1.0.0

MD5:
b328c0bd4eebcff613b6390515a140de

SHA-1:
1c2ec8e0e9751600ae8dd09cd17fd5e71db304be

SHA-256:
3ed21cb12dddd2a7eaa89ab1aa4774c19c5c21ea7630764dfff7618d54f07745

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:28:01 AM UTC  (today)

File size:
2 MB (2,132,040 bytes)

Product version:
1.1.0.0

Copyright:
http://www.pcfreetime.com/

Original file name:
BTInstApp.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\downloads\ffinstonline.exe

File PE Metadata
Compilation timestamp:
5/14/2016 5:25:52 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
49152:zIGn1vVmZnDex27OwsSIqup7DGJ+zZqlUjgr0Kukuy41el+:Pn1WexgrMpvGEZqlR0KuY+

Entry address:
0xF01CE

Entry point:
0F, B6, CB, 0F, AF, D6, 0F, AF, CD, F6, C1, D5, 1D, 2A, 67, 15, E0, 81, EE, 29, 06, 00, 00, C7, C2, F5, C3, 2B, 24, 81, EE, 0B, 4C, 00, 00, 41, 78, 02, 0F, CD, 4F, BB, C4, 50, 00, 00, F6, D6, 81, F3, 3F, 50, 00, 00, 80, F4, E1, 81, C3, A5, 07, 00, 00, FE, C4, 8D, 15, 55, 8D, 89, B4, 81, EB, B2, 0B, 00, 00, FF, CF, 81, C3, B1, 0B, 00, 00, 73, 06, F6, DA, 0F, C9, 85, C5, C7, C1, 01, D8, 36, 96, FF, C9, 81, FB, 5D, 01, 00, 00, 73, D2, 0F, AF, FB, F6, C6, 39, E8, 10, 00, 00, 00, 4B, 8B, D7, 72, 03, 0F, AF, DD...
 
[+]

Entropy:
6.7164

Code size:
1.3 MB (1,350,144 bytes)

The file ffinstonline.exe has been seen being distributed by the following URL.

http://format-factory.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmqaJoKKok5c=

Scan ffinstonline.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.