home

Fade.tns

Fade Page Transition

Ulrich Peters

Publisher:
MindQuake Serviços de Informática  (signed by Ulrich Peters)

Product:
Fade Page Transition

Version:
2, 1, 0, 1

MD5:
6623dbb9d6a259657763a4a94730fc4b

SHA-1:
b367ba0620b5f13db906500afe8758f205c9b14a

SHA-256:
67ff1b02974960b3ae91a51255f2906e11c56bf00d5f3ac1ad28598a2f56b2bf

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 12:48:39 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

File size:
96.1 KB (98,440 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright © 2008-10 MindQuake Serviços

Original file name:
Fade.tns

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\autoplay\plugins\fade.tns

Digital Signature
Signed by:
Ulrich Peters

Authority:
COMODO CA Limited

Valid from:
1/20/2013 8:00:00 PM

Valid to:
1/21/2015 7:59:59 PM

Subject:
CN=Ulrich Peters, O=Ulrich Peters, STREET="Rua Angelo Bertini, 111", STREET=Apt. 43, L=São Paulo, S=São Paulo, PostalCode=04195-090, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00BE0BFBEC6739C7AF45672524203F144B

File PE Metadata
Compilation timestamp:
6/6/2013 5:30:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:If7HJLDOAPNn7g6XNmzzQ+WuQmQ0Y2wajoF/Z4sCTLhXJIh8q0Y2Fxuhwo:CJWqK8up/vcZ4D9fq0Y2Fxno

Entry address:
0x10B73

Entry point:
B8, F4, FE, 03, 10, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, B8, 70, F2, B9, C5, 4C, 90, 68, FD, 0E, 7B, A8, 40, 0F, 84, 0A, 9A, 17, D5, 0C, E8, 4E, 84, BE, 98, 0D, DE, F1, E1, E7, 20, F6, 9F, 39, 53, 8F, 97, 44, BC, B9, 11, 0A, 7B, 2F, 00, 56, F5, ED, C9, 40, C9, AB, BD, AF, CB, 02, CF, 02, AA, 12, 2B, 25, FC, DA, 2E, 2C, 2E, F4, 6E, 40, B0, 0F, 0D, 5F, A9, 7A, B4, CA, 00, 40, 05, F0, D5, 4D, D7, 71, B6, 2A, FE, AD, AE, FB, 39...
 
[+]

Packer / compiler:
PECompact v2

Code size:
137 KB (140,288 bytes)

Scan Fade.tns - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.