The FaceFodUninstaller.exe File Analysis
| Online Virus Checker | v.1.0.180.174 |
| DB Version: | 2024-06-25 17:00:16 |
Clean File
| File | FaceFodUninstaller.exe |
| Checked | 2024-06-25 14:58:29 |
| MD5 | 1cf63ba6d0b57d7bd0105287a359b467 |
| SHA1 | e15e59d4c32eefc1e131f6cc0b19744f6baf8b59 |
| SHA256 | cd06cf633d5dae8bc892108fc589cb0d13b65df3c30b4bcdd4f557413a8cfcc5 |
| SHA512 | bf931056ed5a4a2c5da6a443eacde0d942f459a3bfa1e5019a64d28ad61b62fb7f14690ec8dab72f4c37af4c40fcc25ea2ed5edc2d75f5d33ad1c8dad62184af |
| Imphash | fd75a9ee3406254b69c74e4d304bf056 |
| File Size | 511488 bytes |
Remember: This is Result of Online Virus Scanner
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
| Image Base: | 0x140000000 |
| Entry Point: | 0x14003ff70 |
| Compilation: | 2073-01-02 12:59:24 |
| Checksum: | 0x00085a97 (Actual: 0x00085a97) |
| OS Version: | 10.0 |
| PDB Path: | FaceFodUninstaller.pdb |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 5 |
| Imports: | api-ms-win-crt-runtime-l1-1-0, api-ms-win-crt-private-l1-1-0, api-ms-win-crt-string-l1-1-0, KERNEL32, SHLWAPI, WTSAPI32, api-ms-win-eventing-provider-l1-1-0, api-ms-win-core-com-l1-1-0, api-ms-win-core-registry-l1-1-0, api-ms-win-stateseparation-helpers-l1-1-0, OLEAUT32, api-ms-win-core-version-l1-1-1, api-ms-win-core-version-l1-1-0, api-ms-win-core-winrt-l1-1-0, ntdll, WINHTTP, api-ms-win-security-base-l1-1-0, api-ms-win-security-credentials-l1-1-0, OLE32, winbio, api-ms-win-crt-locale-l1-1-0, api-ms-win-crt-math-l1-1-0, |
| Exports: | 0 |
| Resources: | 0 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0004d91c | 0x0004da00 | cce6eab7613d18c704e26625bb4148cd | 6.25 |
| .rdata | 0x0004f000 | 0x0001a624 | 0x0001a800 | 7d5890308f69340e20c400fbf73c5033 | 4.99 |
| .data | 0x0006a000 | 0x000143a0 | 0x00012000 | 04a69da74a463439b49f85fbb1b60277 | 0.16 |
| .pdata | 0x0007f000 | 0x000022b0 | 0x00002400 | 51c46937014cd0cd4cd830fd5a4319f2 | 5.55 |
| .reloc | 0x00082000 | 0x000003b8 | 0x00000400 | 8e43526d8665f2339cb4a6f643b8109a | 5.17 |
