» swisscomquickhelp.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

swisscomquickhelp.exe

Swisscom Quick Help

mquadr.at software engineering und consulting GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Swisscom Quick Help’. This is installed with Swisscom Quick Help.

File name:

Publisher:

Swisscom (Switzerland) AG (signed by mquadr.at software engineering und consulting GmbH)

Product:

Swisscom Quick Help

Version:

3.2.0.247

MD5:

353f174b7f9dc01f5b78f5a2f988ddbf

SHA-1:

448bdd3668100e877899f265796f486c1984971d

SHA-256:

ecf3dd016023736fd88307c3a8db5fcb871943952bb4c5e171574ec0bdb2f3b5

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/5/2024 3:18:24 PM UTC (today)

File size:

10.1 MB (10,614,656 bytes)

Product version:

3.2

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\swisscom\quick help\swisscomquickhelp.exe

Digital Signature

Signed by:

mquadr.at software engineering und consulting GmbH

Authority:

VeriSign, Inc.

Valid from:

2/10/2009 1:00:00 AM

Valid to:

3/28/2012 1:59:59 AM

Subject:

CN=mquadr.at software engineering und consulting GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=mquadr.at software engineering und consulting GmbH, L=Vienna, S=Vienna, C=AT

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4ECA03C2676792B5D8B8DF5F28BFC517

File PE Metadata

Compilation timestamp:

1/11/2011 3:29:48 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

196608:SDttZhQoNkllb97QvYPUGo07SpsSyf8nCvFVLUzIJkaAqnYcf6pty:SDnZhnqF97QvYPUjbsBUn6ZLkaA1csty

Entry address:

0x468748

Entry point:

55, 8B, EC, B9, 0B, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 88, 12, 86, 00, E8, 5B, FD, B9, FF, 33, C0, 55, 68, 06, 8F, 86, 00, 64, FF, 30, 64, 89, 20, 8D, 45, DC, E8, 7D, CB, EB, FF, 8D, 45, DC, 8D, 55, EC, E8, B2, 2E, BA, FF, A1, A4, 82, 8A, 00, BA, 20, 8F, 86, 00, E8, 5B, D2, B9, FF, A1, 58, 8F, 8A, 00, BA, 50, 8F, 86, 00, E8, 4C, D2, B9, FF, A1, FC, 87, 8A, 00, BA, 88, 8F, 86, 00, E8, 3D, D2, B9, FF, A1, 74, 81, 8A, 00, BA, B8, 8F, 86, 00, E8, 2E, D2, B9, FF, E8, 95, 7D, FF, FF, 84... 
[+]

Entropy:

7.3614

Developed / compiled with:

Microsoft Visual C++

Code size:

4.4 MB (4,619,776 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Swisscom Quick Help

Command:

C:\Program Files\swisscom\quick help\swisscomquickhelp.exe \auto

The file swisscomquickhelp.exe has been discovered within the following program.

Swisscom Quick Help by Swisscom (Switzerland) AG

About 3% of users remove it

Scan swisscomquickhelp.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.