home

tsclientb.exe

ActFax

ActFax Communication-Software GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ActiveFax Terminal Server’.
Publisher:
ActFax Communication  (signed by ActFax Communication-Software GmbH)

Product:
ActFax

Description:
ActFax Port Monitor

Version:
5.10 Build 0245

MD5:
6ebcbb906acdcd3197a7b15dbf4b01e1

SHA-1:
7dd5f19b28fbcb2409fca68f4d435774d1b89ecb

SHA-256:
9340d79c80ac69b5cbc3f64a89eb7acbdf491a1e428a7b027ae00656724359ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 12:18:20 AM UTC  (today)

File size:
576.6 KB (590,464 bytes)

Product version:
5.10 Build 0245

Copyright:
Copyright © ActFax Communication

Original file name:
ActMon32.dll

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\activefax\terminal\tsclientb.exe

Digital Signature
Signed by:
ActFax Communication-Software GmbH

Authority:
A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH

Valid from:
4/3/2012 4:07:13 AM

Valid to:
4/3/2017 2:07:13 AM

Subject:
E=office@actfax.com, SERIALNUMBER=144314310976, CN=ActFax Communication-Software GmbH, C=AT

Issuer:
CN=a-sign-corporate-light-03, OU=a-sign-corporate-light-03, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, C=AT

Serial number:
0B0849

File PE Metadata
Compilation timestamp:
6/2/2014 8:54:01 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
6144:oVpW8X3d7je9Efcdm7qh0GMXPZrbbopDswnewUfTlBPhnRPlUHxLJ1fKdKJPrtqn:oRX569Efcdmu27opDtewURVNt2rtqn

Entry address:
0x5B8A0

Entry point:
48, 83, EC, 28, E8, F7, 4C, 00, 00, 48, 83, C4, 28, E9, 02, 00, 00, 00, CC, CC, 48, 89, 5C, 24, 10, 48, 89, 74, 24, 18, 57, 48, 83, EC, 30, E8, 1C, 11, 00, 00, 0F, B7, F0, B9, 02, 00, 00, 00, E8, 83, 4C, 00, 00, B8, 4D, 5A, 00, 00, 48, 8D, 3D, 1F, 47, FA, FF, 66, 39, 05, 18, 47, FA, FF, 74, 04, 33, DB, EB, 31, 48, 63, 05, 47, 47, FA, FF, 48, 03, C7, 81, 38, 50, 45, 00, 00, 75, EA, B9, 0B, 02, 00, 00, 66, 39, 48, 18, 75, DF, 33, DB, 83, B8, 84, 00, 00, 00, 0E, 76, 09, 39, 98, F8, 00, 00, 00, 0F, 95, C3, 89...
 
[+]

Entropy:
6.1445

Code size:
407.5 KB (417,280 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ActiveFax Terminal Server

Command:
C:\Program Files\activefax\terminal\tsclientb.exe


Scan tsclientb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.