home

trans.exe

Trans Instant Messenger

Logintrans Sp. z o.o.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Trans’.
Publisher:
Rising Sun Technologies  (signed by Logintrans Sp. z o.o.)

Product:
Trans Instant Messenger

Version:
4.3.5.4496

MD5:
57d6cd2185c3b81dca3831f1ffde118a

SHA-1:
b7a31545f8dc33099b336f9d37fb940730ce777f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 5:08:31 PM UTC  (today)

File size:
4.6 MB (4,839,968 bytes)

Product version:
4.3.5.4496

Copyright:
(c) 2013 by RST

Original file name:
trans.exe

File type:
Executable application (Win32 EXE)

Language:
Polish

Common path:
C:\Program Files\trans\trans.exe

Digital Signature
Signed by:
Logintrans Sp. z o.o.

Authority:
Thawte, Inc.

Valid from:
7/16/2012 2:00:00 AM

Valid to:
7/17/2014 1:59:59 AM

Subject:
CN=Logintrans Sp. z o.o., OU=DEPARTAMENT IT, O=Logintrans Sp. z o.o., L=Wroclaw, S=Dolnoslaskie, C=PL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
34237A412068EDE12EF74932ED545A66

File PE Metadata
Compilation timestamp:
6/14/2013 3:12:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:WmCrpzbxNHIPnU0BsjIWfrxKXMgJz7SFaJHCG0JBZ:i9x9qvqx8c+CGSj

Entry address:
0x11DE06F

Entry point:
E8, F7, FE, FF, FF, 05, 5D, 18, 00, 00, FF, E0, E8, EB, FE, FF, FF, 05, C0, 0F, 00, 00, FF, E0, E8, EE, 00, 00, 00, 6B, B2, 5D, 01, 30, 31, 20, 06, CF, 1B, 14, 0F, 68, 27, 19, AC, 30, 14, 23, 01, 59, 0D, 31, 43, 16, 38, 5C, 26, 0E, 0A, 4F, 03, 15, 2B, 1C, 04, 1C, 2C, 12, 0C, 34, 14, 15, 3C, 07, 15, 07, 18, 64, 27, 28, 07, A3, 24, 14, 0C, 1C, 0E, 1F, 09, 0E, 07, FE, 33, 00, 0E, 2A, D6, 36, 28, 13, 0A, 15, 30, 19, 6D, 0A, 22, 5D, 56, 1C, 1C, 30, 0B, 53, 08, 84, 12, 1D, 15, 01, 0C, 2A, 11, 06, 18, 37, 18, 61...
 
[+]

Packer / compiler:
EXECryptor 2.2.4

Code size:
5.8 MB (6,049,792 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Trans

Command:
C:\Program Files\trans\trans.exe


Scan trans.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.