home

uf400ani.exe

Frederik Slijkerman

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com.
Publisher:
Frederik Slijkerman  (signed and verified)

MD5:
22c9e80e3fe0f0cecf2a3a07b83d6ff9

SHA-1:
2a2d5dc72403a94b4d3f06ef3ff86e78d573700c

SHA-256:
3863c45eff53c0884b65e0ca417ed6f4e062b230f20ddf9ea5913f277a5f39d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 4:07:16 AM UTC  (today)

File size:
5 MB (5,220,152 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Frederik Slijkerman

Authority:
GlobalSign nv-sa

Valid from:
1/14/2005 7:07:35 PM

Valid to:
1/14/2006 7:07:35 PM

Subject:
E=frederik@ultrafractal.com, CN=Frederik Slijkerman, C=NL

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000101711F0BD7

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:b82q9YrTOFOZ+VHce4F6qf7t1Mcmew58iKVi1a9jZvC:bcvwZGce+6qf7zE5KV9Fq

Entry address:
0x7EDB0

Entry point:
55, 8B, EC, 83, C4, F0, B8, 58, EB, 47, 00, E8, 68, 72, F8, FF, A1, 88, 10, 48, 00, 8B, 00, E8, 6C, DF, FD, FF, E8, 4B, 5E, FE, FF, 84, C0, 74, 05, E8, 86, ED, FF, FF, A1, 88, 10, 48, 00, 8B, 00, BA, 1C, EE, 47, 00, E8, 45, DB, FD, FF, 8B, 0D, 84, 0E, 48, 00, A1, 88, 10, 48, 00, 8B, 00, 8B, 15, 34, D5, 47, 00, E8, 4D, DF, FD, FF, A1, 88, 10, 48, 00, 8B, 00, E8, C1, DF, FD, FF, E8, B8, 50, F8, FF, FF, FF, FF, FF, 05, 00, 00, 00, 53, 65, 74, 75, 70, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9551

Developed / compiled with:
Microsoft Visual C++

Code size:
504 KB (516,096 bytes)

The file uf400ani.exe has been seen being distributed by the following URL.

http://gsf-cf.softonic.com/2a2/d5d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=11378&instance=softonic_en&type=PROGRAM&Expires=1438031219&Signature=es0eMGFBDUgHLVcYOwl7Z3KPnzUetFNLnWc3OusM0IGH0WxcwR5w-cL9O39hjD55KgXEyq~5RwIeLRiNfIZWo5JAg-0ArEYNDCuvT0w6LYw-3RTadVVEKn-S5GAqaIjZ5kJ2xaGXD2hM0Bv69oLMb8KMPbCMC46Wnc0JkRnw~No_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=uf400ani.exe

Scan uf400ani.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.