home

GWHelp.exe

GWHelp

Console Australia Pty Ltd

Publisher:
Console Australia Pty Ltd  (signed by Console Australia Pty Ltd)

Product:
GWHelp

Version:
1.00.0014

MD5:
83d1c3f340efa54589a9a72e2a3bb45a

SHA-1:
bc653be1c4770f8bbc0b94a208fd6f649fed9c0a

SHA-256:
49f4a1c25ebf56a5fd02d8e26f4c2148c9add8e49bc25948aab48ad8f3cdc69b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/17/2024 1:40:25 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.6379

File size:
82.4 KB (84,328 bytes)

Product version:
1.00.0014

Original file name:
GWHelp.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\console\gateway 7.0\gwhelp.exe

Digital Signature
Signed by:
Console Australia Pty Ltd

Authority:
VeriSign, Inc.

Valid from:
2/26/2013 10:00:00 AM

Valid to:
3/29/2014 9:59:59 AM

Subject:
CN=Console Australia Pty Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Console Australia Pty Ltd, L=Brisbane, S=Queensland, C=AU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
75015957A832417CBB690F9F43522C42

File PE Metadata
Compilation timestamp:
12/19/2012 10:44:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:cdtTR+Qifgmn/ENDpYlvb0Kw+gu/Up9ifLUV:c/R+QYgmnVb6Gsp9Yc

Entry address:
0x1660

Entry point:
68, 4C, 18, 40, 00, E8, EE, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, 95, B3, 61, 69, 6A, E5, 51, 4F, 89, 96, 9C, 5C, DA, BF, A8, A3, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 54, 79, 70, 65, 20, 4C, 47, 57, 48, 65, 6C, 70, 00, 00, 00, 9B, 08, 45, 58, 8F, 00, 80, 00, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 03, 00, 00, 00, E6, 14, 9F, EE, 46, 23, 73, 4B, 80, 40, D6, 6D, 83, 05, AD, 93, 01, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.3232

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
60 KB (61,440 bytes)

Scan GWHelp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.