» fern.exe
Overview
Analysis
File Details

fern.exe

FastViewer

FastViewer GmbH und Co KG

File name:

fern.exe

Publisher:

Fastviewer.com (signed by FastViewer GmbH und Co KG)

Product:

FastViewer

Version:

3.20.0010

MD5:

a2ff4059ab4a9abe53cff4d81b5cf4ba

SHA-1:

f2703c750d69de8ac72ff109b0c4a187b4828f8f

SHA-256:

926dbd62b45bf57772906c9419d3b07fed455b2b6632be37a675dc6cf0ebef52

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

4/26/2024 7:46:21 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PECompact

7.1.1

File size:

1.5 MB (1,593,832 bytes)

Product version:

3.20.0010

Original file name:

FastViewer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

FastViewer GmbH und Co KG

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

9/2/2009 2:00:00 AM

Valid to:

11/12/2011 12:59:59 AM

Subject:

CN=FastViewer GmbH und Co KG, OU=SECURE APPLICATION DEVELOPMENT, O=FastViewer GmbH und Co KG, L=Neumarkt in der OPf, S=Bayern, C=DE

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

5ABA24A7860039CD7C898AA4E1C9CDAE

File PE Metadata

Compilation timestamp:

8/11/2011 8:39:49 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:vuLNumR+jsi84SHgioFcMTPwKjd9BraWm+mP40rrdLQpo5je47rk:2EmIsiCH27Tzjd9JVtmPxH+po5g

Entry address:

0x1000

Entry point:

B8, AC, 14, 96, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, D4, 23, E5, 2E, 60, 72, 15, FF, 4F, 3E, 0C, E2, CD, EE, 5E, A5, FD, D2, A0, 99, 64, 41, A2, 23, FC, 8B, 81, 00, 40, 8A, 08, 70, 73, F8, 7F, 45, D4, B8, 99, 4D, 25, CD, 89, E7, 24, 1C, FC, 02, 8A, E7, C2, A8, 06, E4, 8C, 26, F8, 71, 83, E9, B5, 20, AB, 69, C6, 84, AA, A7, A4, 74, 99, 6B, 92, 36, 33, 14, 98, 68, DF, E4, C6, 5B, 13, 18, 02, A7, 88, 21, F7, AF, D7, 37, B1... 
[+]

Packer / compiler:

PECompact v2

Code size:

2.5 MB (2,658,304 bytes)

Scan fern.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.