Gridinsoft Logo
File Icon

The formatfactory-5-16-0-0.exe (Format Factory Video/Audio/Picture Converter) File Analysis

Technical Analysis

File Name formatfactory-5-16-0-0.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
3145728:+prLdoPD1Ikkg8peZwgprRWebxO7/2sLTCV:+prRoPD17kg84ZTrRh47bLK
Scanner Version 1.0.196.174
Database Version 2024-11-16 10:00:52 UTC

Suspicious File Detected

Detected by 7 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
11%
Detection Rate
102,072,624
File Size (bytes)
7/64
Engines Detected
2024-11-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ff7e7eaf923f82d69b43f5f6501120c2
SHA1
461c2f18c492b1ce86c9b493841b4d60287d1e9a
SHA256
6cd5600ad5db4c960e49f41731b70d66b89d698919123ebcb32b4366dffb352f
SHA512
fabb06b8d9474647402b72d674bf0639bb485088325516dd0f617d926be9fe07a85437546d6d4367a8dfcaae07ed3bb483abcf547a9512f0e1acbebda39af8d1
ImpHash
4ea4df5d94204fc550be1874e1b77ea7

Security Engines with Detections (7 of 64)

ESET-NOD32
a variant of Win64/FormatFactory.A potentially unwanted Malicious
Xcitium
ApplicUnwnt@#r5m1pv0tolrr Malicious
DeepInstinct
MALICIOUS Malicious
VBA32
ServerProxy.Luminati Malicious
Fortinet
Adware/LuminatiNetworks_AGen Malicious
AVG
Win64:PUP-gen [PUP] Malicious
Avast
Win64:PUP-gen [PUP] Malicious
57 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: 71ec5075b65b7cca7a1ee61965c53ddf
Fuzzy: ec3f9df6c2d52e75485397bf843c2c91
dHash: 2369271b1565271d
Image Base 0x00400000
Entry Point 0x004033b6
Compilation Time 2016-07-25 00:55:51
Checksum 0x0615c0cd (Actual: 0x0615c0cd)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
Exports 0 functions
Resources 43 Resources
Sections 5 Sections

Version Information

Comments Format Factory Media Tools
CompanyName Free Time Co., Ltd
FileDescription Format Factory Video/Audio/Picture Converter
FileVersion 5.16.0.0
LegalCopyright Free Time Co., Ltd
LegalTrademarks Format Factory Application is a trademark of FreeTime
ProductName Format Factory
ProductVersion 5.16.0.0
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 24,925 bytes 25,088 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0B0812166EBBD0109E7F5E007B182949
.rdata 0x00008000 5,028 bytes 5,120 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4AC891D4DDF58633F14436F9F80AC6B6
.data 0x0000a000 131,896 bytes 1,536 bytes 3.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 66B45FCEBA0F24D768FB09E0AFE23C99
.ndata 0x0002b000 151,552 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00050000 113,896 bytes 114,176 bytes 5.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6EA1A446ABD6EA2AF6991306CED42019

Resource Analysis

Total Resources: 43 (111,593 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 99,592 bytes
89.2%
RT_DIALOG 35 9,956 bytes
8.9%
RT_GROUP_ICON 1 76 bytes
0.1%
RT_VERSION 1 900 bytes
0.8%
RT_MANIFEST 1 1,069 bytes
1%

Certificate Chain Analysis

Certificate Information
Product Format Factory
Description Format Factory Video/Audio/Picture Converter
File Version 5.16.0.0
Signing Date 06:38 PM 10/25/2023 (632 days ago)
Verification Status Signed
Signers Free Time Software Technology Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Free Time Co., Ltd
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2023 #4 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
Free Time Software Technology Co., Ltd. #5 Chain
Validity Period: 2022-09-02 00:00:00 → 2025-04-04 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 9E 62 B2 C1 B2 95 1C 32 92 6B 4C 64 78 D1 DF

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
7 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware