home

ffp.exe

Free FLV PLayer

Greentree Applications SRL

The application ffp.exe by Greentree Applications SRL has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Free FLV Player V 2.0 by KoyoteSoft Inc..
Publisher:
Koyote Soft  (signed by Greentree Applications SRL)

Product:
Free FLV PLayer

Version:
2.00

MD5:
e7a785af015d2dcfa7798a2e3c349d97

SHA-1:
e96da2647a7db87256d9d443b606d3c44969361c

SHA-256:
8626b362d140ab407de41498595211846c6ddd1e197c082302caea5792717dbf

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/16/2024 5:13:42 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.GreentreeApplicationsSRL
15.3.5.17

File size:
321.9 KB (329,592 bytes)

Product version:
2.00

Copyright:
Koyote Soft

Trademarks:
Koyote Soft

Original file name:
ffp.exe

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Program Files\free flv player\ffp.exe

Digital Signature
Signed by:
Greentree Applications SRL

Authority:
VeriSign, Inc.

Valid from:
6/24/2011 4:00:00 AM

Valid to:
6/24/2012 3:59:59 AM

Subject:
CN=Greentree Applications SRL, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Greentree Applications SRL, L=Bucharest, S=Bucharest, C=RO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
55A7F018B18D4B6488FE25E1E6D2AF31

File PE Metadata
Compilation timestamp:
7/12/2011 3:38:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:nz7/TLDoLOO0pnPeLhjxDmR0+fYTfgSJshB+OGmfplOOM8GpC40SZVvrZ:nX/LoLOODi0+fYTflshB+Ov0JppXZVd

Entry address:
0x1A64

Entry point:
68, FC, A3, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 59, BC, BB, A2, 07, 32, 29, 4E, 81, D8, 4E, 67, 7E, 39, B8, A0, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 46, 46, 50, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 13, CD, F8, 17, A9, 76, 7D, E8, 4C, 8A, 8E, C3, 73, 80, 5A, 52, 77, C1, 97, 34, D2, 81, 7A, A9, 4D, 83, 75, 18, 67, FC, D7, EF, 1C, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00, AA, 00, 60, D3, 93, 00, 00, 00...
 
[+]

Entropy:
5.3038

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
256 KB (262,144 bytes)

The file ffp.exe has been discovered within the following program.

Free FLV Player V 2.0  by KoyoteSoft Inc.
www.koyotesoft.com/indexEn.html
50% remove it
 
Powered by Should I Remove It?

Remove ffp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.