home

ffsetup3.9.0.0.exe

Format Factory

chen jun hao

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.filehorse.com and multiple other hosts.
Publisher:
Free Time  (signed by chen jun hao)

Product:
Format Factory

Description:
Format Factory Video/Audio/Picture Converter

Version:
3.9.0.0

MD5:
8d398334d3ec757ce4c1e1b93bf2e413

SHA-1:
ce3936a48fab2401842b0fe0cd328777a94a1db8

SHA-256:
c7e9390eb481ddeb1f7819e71f72a03446dbcf9d326a2f0e5024ec552bbab1fc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:42:52 AM UTC  (today)

File size:
43.4 MB (45,491,144 bytes)

Product version:
3.9.0.0

Copyright:
Free Time

Trademarks:
Format Factory Application is a trademark of FreeTime

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Digital Signature
Signed by:
chen jun hao

Authority:
GlobalSign nv-sa

Valid from:
6/25/2013 5:09:13 PM

Valid to:
6/25/2016 5:09:13 PM

Subject:
CN=chen jun hao, C=CN

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11215F9DDE67138EA8C52C9F6F1901954DE8

File PE Metadata
Compilation timestamp:
12/17/2013 2:46:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:+F9jg9p5HTOI/ZCz0esaVdTx9/Xhp7OfN8H/TSbN6o7H+dPinbAGStp:+F9jEp5NhCz0arTx1h9OKfTSbN6o7H+3

Entry address:
0x3A0A

Entry point:
81, EC, D8, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, DB, 5E, 89, 5C, 24, 18, C7, 44, 24, 10, 40, A2, 40, 00, 89, 5C, 24, 14, FF, 15, 90, 90, 40, 00, 89, 44, 24, 1C, FF, 15, 34, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 90, 40, 00, 53, FF, 15, 30, 93, 40, 00, 6A, 08, A3, B8, 3E, 47, 00, E8, 2B, 2A, 00, 00, 53, 68, B4, 02, 00, 00, A3, D0, 3D, 47, 00, 8D, 44, 24, 3C, 50, 53, 68, 84, A3, 40, 00, FF, 15, A4, 91, 40, 00, 68, 6C, A3, 40, 00, 68, C0, BD, 46, 00, E8, 0D, 27, 00, 00, FF, 15, B4, 90, 40, 00, 50, BF...
 
[+]

Entropy:
7.9998

Packer / compiler:
Nullsoft install system v2.x

Code size:
30.5 KB (31,232 bytes)

The file ffsetup3.9.0.0.exe has been seen being distributed by the following 50 URLs.

http://www.filehorse.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/88b2747f6bf044b595988e3cf106b336/573b4e12/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://lb.cdn.m6web.fr/d/c/a/d05f8ede2100fefac4461e8a6f7f1b74/57277887/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://lb.cdn.m6web.fr/d/c/a/5ec2b12334ce175f3533ad05c9c033a1/573b7c8b/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://lb.cdn.m6web.fr/d/c/a/dfba1477b3f7a72a259a301de9d428a1/5735c179/soft/.../formatfactory_3-9-0-0_fr_223920.exe

https://www.kaldata.com/modules.php?modid=1&action=download&id=1397

http://lb.cdn.m6web.fr/d/c/a/2922b87054403a4fbb8e0a9cbb82cfa0/57318970/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/63e014ea0ab0b093c9789089ab9d931c/57367062/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/915b97a2cebc9fcd79dcb36a5b089b3f/572bbd39/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/0e6da3d4991aee32edc39e8734fd37f2/573c36b3/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/1cd11a174088172e29060812fa2bf7bd/57408bec/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/00be561bcc2ff183e35c44a7af24b09c/5739aaf3/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://googledrive.com/host/.../FFSetup3.9.0.0.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/ad05671483909ffbbc38650c233fca94/5736faf9/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.filehorse.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/a59c49de1bd762d19ebec7c56c7e3793/572f1a46/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://lb.cdn.m6web.fr/d/c/a/e0d2d034c9f163d5941491c792ba4184/5738487a/soft/.../formatfactory_3-9-0-0_fr_223920.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=2kdb9o91h8dco7rgi1kmm4v6a6

http://megasoft.uz/.../9074?1477249459

Latest 30 of 360 download URLs

Scan ffsetup3.9.0.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.