home

TSAutoUpdate.exe

TalkSwitch Auto Update Utility

Fortinet Technologies (Canada) Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TSM_AutoUpdate’.
Publisher:
TalkSwitch Corp.  (signed by Fortinet Technologies (Canada) Inc.)

Product:
TalkSwitch Auto Update Utility

Version:
6.12.089.01

MD5:
e4c55927b3425112ab42abacc35a7aa8

SHA-1:
d6e1f6bfb582c40d5d0c618bb1a8632eba77c538

SHA-256:
6eb55d615061843c918334fe3d1ceeaaef009d8a348452cc83d32ec913aefe60

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 10:06:48 PM UTC  (today)

File size:
190.5 KB (195,120 bytes)

Product version:
6.12.089.01

Copyright:
Copyright 2006-2010 TalkSwitch Corp.

Original file name:
TSAutoUpdate.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\talkswitch\talkswitch configuration 6.12\tsautoupdate.exe

Digital Signature
Signed by:
Fortinet Technologies (Canada) Inc.

Authority:
VeriSign, Inc.

Valid from:
6/20/2012 8:00:00 PM

Valid to:
6/21/2014 7:59:59 PM

Subject:
CN=Fortinet Technologies (Canada) Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Fortinet Technologies (Canada) Inc., L=Ottawa, S=Ontario, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
12B415829667AA6431DB60300316C4B1

File PE Metadata
Compilation timestamp:
1/7/2013 1:24:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:gzUmNmHrUqeBsVGB8KGwn3OEl1NBON1IeCDjTnp3hiWe+JTjeUbtIC3vP7OIDSLt:EUhUqNardBON1KxvLRIC3vDOIDSLt

Entry address:
0xBF31

Entry point:
E8, 60, 04, 00, 00, E9, 35, FD, FF, FF, CC, 68, 93, BF, 40, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 20, 30, 41, 00, 31, 45, FC, 33, C5, 89, 45, E4, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, E4, 33, CD, E8, 8E, FB, FF, FF, E9, 7E, 02, 00, 00, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24, 10, 68, 1C, BB, 40, 00, 68, 20, 30, 41, 00, E8, 78, 04, 00...
 
[+]

Entropy:
6.1381

Code size:
52 KB (53,248 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TSM_AutoUpdate

Command:
C:\Program Files\talkswitch\talkswitch configuration 6.12\tsautoupdate.exe


Scan TSAutoUpdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.