home

trans.exe

Trans Instant Messenger

Logintrans Sp. z o.o.

Publisher:
Rising Sun Technologies  (signed by Logintrans Sp. z o.o.)

Product:
Trans Instant Messenger

Version:
4.2.0.3928

MD5:
a5ef31d0d1523424373e6a4e3042b5c1

SHA-1:
3647d1f47652dbd12674df51401d837109103eb2

SHA-256:
359cf5199e62996d1cbbd0dc76510fee2c7618769343d3bf5136eaacfdfcffcb

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/19/2024 8:00:08 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.6979

File size:
4.5 MB (4,695,224 bytes)

Product version:
4.2.0.3928

Copyright:
(c) 2012 by RST

Original file name:
trans.exe

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

Common path:
C:\Program Files\trans\trans.exe

Digital Signature
Signed by:
Logintrans Sp. z o.o.

Authority:
Thawte, Inc.

Valid from:
7/16/2012 2:00:00 AM

Valid to:
7/17/2014 1:59:59 AM

Subject:
CN=Logintrans Sp. z o.o., OU=DEPARTAMENT IT, O=Logintrans Sp. z o.o., L=Wroclaw, S=Dolnoslaskie, C=PL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
34237A412068EDE12EF74932ED545A66

File PE Metadata
Compilation timestamp:
1/4/2013 8:40:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:K86+fCngBGPyKVo//kd+p/r5QPcJu8gCS:Vcg/HxqhpX

Entry address:
0x112A73D

Entry point:
E8, F7, FE, FF, FF, 05, 82, 2A, 00, 00, FF, E0, E8, EB, FE, FF, FF, 05, 51, 26, 00, 00, FF, E0, E8, F0, 00, 00, 00, 91, 75, 52, 01, 08, 07, 2E, 17, 78, 0E, B8, 0D, 98, 75, 46, 36, 20, 1B, 5D, 07, 0C, 7A, 6A, 29, 10, 28, 80, 19, 2E, 1D, 4A, 0A, F3, 4E, 0E, 48, 59, 07, BC, 25, 1B, 07, 21, 08, 31, 10, 2D, 23, 29, 6D, 0A, 06, 11, 39, 33, 30, 07, 3F, 21, 08, 15, 39, 0D, 2B, 1E, 96, 2A, 14, 08, 13, 0D, 40, 0F, 09, 15, 37, 33, 16, 08, 23, 08, 77, 3F, 10, 08, 26, 15, 0B, 0E, 53, 16, 21, 4A, 1B, FE, 1D, 00, 99, 1D...
 
[+]

Packer / compiler:
EXECryptor 2.2.4

Code size:
5.6 MB (5,840,896 bytes)

Windows Firewall Allowed Program
Name:
trans instant messenger


Scan trans.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.