home

core.exe

GAS Tecnologia - Protection

GAS INFORMATICA LTDA

It runs as a separate (within the context of its own process) windows Service named “Warsaw Technology”. This is installed with Warsaw 1.3.1.
Publisher:
GAS Tecnologia LTDA  (signed by GAS INFORMATICA LTDA)

Product:
GAS Tecnologia - Protection

Description:
GAS Tecnologia - Core

Version:
2.7.2.5519

MD5:
cd9109534403399acc7d2a079f9b5608

SHA-1:
ee8d46ce46b253b64444743d2b198d00ae1b9e39

SHA-256:
d443bfc982110f48b13956829c148e51c104352cb6a719b6d0d9d42e48079a58

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:40:26 AM UTC  (today)

File size:
506.8 KB (518,968 bytes)

Product version:
2.7.2.5519

Copyright:
Copyright © 2014 - GAS Tecnologia

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Common path:
C:\Program Files\diebold\warsaw\core.exe

Digital Signature
Signed by:
GAS INFORMATICA LTDA

Authority:
VeriSign, Inc.

Valid from:
8/30/2012 9:00:00 PM

Valid to:
8/13/2015 8:59:59 PM

Subject:
CN=GAS INFORMATICA LTDA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GAS INFORMATICA LTDA, L=Brasilia, S=Distrito Federal, C=BR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
58C005F9811C3FD333668072A04E0D1B

File PE Metadata
Compilation timestamp:
7/12/2014 10:36:38 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:5THPUV5VnlTMPoDoQL7N/l01rG5CEstDl9EjTzyotqwaxW4q31d/:5T+VnuqJLHqG5+DHEPFtqwj4q31d/

Entry address:
0xBA20F

Entry point:
9C, FF, 34, 24, C7, 44, 24, 04, FC, 12, 28, CE, E9, 8C, C1, 00, 00, 00, 00, 57, 61, 69, 74, 46, 6F, 72, 53, 69, 6E, 67, 6C, 65, 4F, 62, 6A, 65, 63, 74, 00, 00, 00, 44, 69, 73, 63, 6F, 6E, 6E, 65, 63, 74, 4E, 61, 6D, 65, 64, 50, 69, 70, 65, 00, 00, 00, 5F, 5F, 63, 72, 74, 53, 65, 74, 55, 6E, 68, 61, 6E, 64, 6C, 65, 64, 45, 78, 63, 65, 70, 74, 69, 6F, 6E, 46, 69, 6C, 74, 65, 72, 00, C7, 04, 24, AD, 89, 12, 47, 8D, 64, 24, 04, 0F, 86, 06, CB, 00, 00, 38, D4, F7, C6, 4F, CC, EE, 68, 83, E9, 01, 66, 81, E7, C7...
 
[+]

Code size:
449 KB (459,776 bytes)

Service
Display name:
Warsaw Technology

Type:
Win32OwnProcess


The file core.exe has been discovered within the following program.

Warsaw 1.3.1  by GAS Tecnologia
www.gastecnologia.com.br
About 8% of users remove it
 
Powered by Should I Remove It?

Scan core.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.