home

Faxmach.exe

Fax Machine

Nico Cuppen Software

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Fax Machine’.
Publisher:
Nico Cuppen Software  (signed and verified)

Product:
Fax Machine

Version:
0, 5, 0, 5

MD5:
36f0cff345b64d86ada8896e1afb2cbc

SHA-1:
0619723911913539f7caf6f730d228f7fc9ac86d

SHA-256:
28db604bd2ae9f591f0e48d6c9c8d1a50704289f1a84df15a8c9a137bed36811

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 11:02:28 AM UTC  (today)

File size:
1.3 MB (1,407,232 bytes)

Product version:
0, 5, 0, 5

Copyright:
Copyright © 2010, Nico Cuppen Software

Trademarks:
Copyright © 2010, Nico Cuppen Software

Original file name:
Faxmach.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\fax machine\faxmach.exe

Digital Signature
Signed by:
Nico Cuppen Software

Authority:
The USERTRUST Network

Valid from:
9/11/2009 4:30:00 AM

Valid to:
9/12/2010 4:29:59 AM

Subject:
CN=Nico Cuppen Software, O=Nico Cuppen Software, STREET=Pijnboomstraat 39, L=Haarlem, S=Noord-Holland, PostalCode=2023 VN, C=NL

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
2F02F95A94041105F0A20F57BE8E7116

File PE Metadata
Compilation timestamp:
9/1/2010 11:54:50 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:7Auj0/PfGxwVhUuqvNqReW7HMliOY8xIacSRlG3E5NTQFNjPOvy+KTQ2OMtNmVv:kua+xwCqKgOYkcSRlG36T2NDh+KTOMzG

Entry address:
0xD79B7

Entry point:
E8, B3, 4C, 01, 00, E9, 78, FE, FF, FF, CC, CC, CC, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, DC, 79, 3C, 60, FF, 75, 08, E8, 68, 96, 02, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 80, 8C, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89, 02, B8, 03, 00, 00, 00, C3, 53, 56, 57, 8B, 44, 24, 10, 55, 50, 6A, FE, 68, E4, 79...
 
[+]

Entropy:
6.6206

Code size:
1.1 MB (1,114,112 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Fax Machine

Command:
C:\Program Files\fax machine\faxmach.exe


Scan Faxmach.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.