actfax_setup_x64_fr.exe

ActFax

ActFax Communication-Software GmbH

This is a self-extracting archive and installer. The file has been seen being downloaded from www.actfax.com.
Publisher:
ActFax Communication  (signed by ActFax Communication-Software GmbH)

Product:
ActFax

Description:
ActFax Setup

Version:
6.20 Build 0271

MD5:
60c49d335b8ce68dde8ee7c23078fa79

SHA-1:
d9b15483308565f33af372ca2c7cb474315e1da1

SHA-256:
3a20b2c897c752d127a888dc5b4f544dc5561454288b0a832cfb020b60c7dafd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/23/2018 4:38:48 AM UTC  (today)

File size:
16.8 MB (17,600,360 bytes)

Product version:
6.20 Build 0271

Copyright:
Copyright © ActFax Communication

Original file name:
Setup.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\actfax_setup_x64_fr.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
12/24/2015 1:00:00 AM

Valid to:
12/24/2018 12:59:59 AM

Subject:
CN=ActFax Communication-Software GmbH, OU=IT, O=ActFax Communication-Software GmbH, L=Krems, S=Krems, C=AT

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
772976E7AE090206C27F9B224AFE2F15

File PE Metadata
Compilation timestamp:
3/4/2016 8:24:00 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
393216:eaLMKC4GnnOVtq6CDEn8YjMrORWzV+90MNvWQY0mKzcsgnEA95vzdcbq1Zpb:eaLMf4vVCDOQr+KYNvWt0j65bdqq1Zpb

Entry address:
0x34AC

Entry point:
48, 83, EC, 28, E8, B3, 02, 00, 00, 48, 83, C4, 28, E9, 72, FE, FF, FF, CC, CC, 48, 83, EC, 28, E8, 4B, 08, 00, 00, 85, C0, 74, 21, 65, 48, 8B, 04, 25, 30, 00, 00, 00, 48, 8B, 48, 08, EB, 05, 48, 3B, C8, 74, 14, 33, C0, F0, 48, 0F, B1, 0D, 0C, 4E, 01, 00, 75, EE, 32, C0, 48, 83, C4, 28, C3, B0, 01, EB, F7, CC, CC, CC, 40, 53, 48, 83, EC, 20, 0F, B6, 05, 27, 4E, 01, 00, 85, C9, BB, 01, 00, 00, 00, 0F, 44, C3, 88, 05, 17, 4E, 01, 00, E8, 32, 06, 00, 00, E8, 55, 0C, 00, 00, 84, C0, 75, 04, 32, C0, EB, 14, E8...
 
[+]

Code size:
47.5 KB (48,640 bytes)

The file actfax_setup_x64_fr.exe has been seen being distributed by the following URL.

Scan actfax_setup_x64_fr.exe - Powered by Reason Core Security