home

FAHConsole.exe

File Association Helper

WinZip Computing LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘FAHConsole’. This is installed with multiple programs including File Association Helper.
Publisher:
Nico Mak Computing  (signed by WinZip Computing LLC)

Product:
File Association Helper

Version:
1.2.225.65451

MD5:
367ebf505f87e005de36bd20f668b104

SHA-1:
20583efa2423c522cc19d4e5b62eae0964b84480

SHA-256:
8d8ef0b96e65a99d5e607cc9115eff086468825a0976b8880e59a316a0863f28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:40:57 AM UTC  (today)

File size:
712.2 KB (729,272 bytes)

Product version:
1.2.225.65451

Copyright:
WinZip Computing International, LLC

Original file name:
FAHConsole.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\file association helper\fahconsole.exe

Digital Signature
Signed by:
WinZip Computing LLC

Authority:
GlobalSign nv-sa

Valid from:
7/9/2013 6:49:58 PM

Valid to:
7/10/2015 6:49:58 PM

Subject:
E=help@winzip.com, CN=WinZip Computing LLC, O=WinZip Computing LLC, L=Storrs Mansfield, S=CT, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112144096D1CB7E1128D086CAB8DEEAB88F2

File PE Metadata
Compilation timestamp:
1/28/2014 4:15:00 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:rVhMIqXRG0cRmSD3/znn9Wh+JzMpFhyoASY:JhMLDSD3ghSK/yuY

Entry address:
0xB9D0

Entry point:
48, 83, EC, 28, E8, 07, DD, 00, 00, E8, 12, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 81, EC, C8, 00, 00, 00, C7, 84, 24, A4, 00, 00, 00, 00, 00, 00, 00, 48, 8D, 4C, 24, 20, FF, 15, 6B, F7, 05, 00, E8, 9E, 01, 00, 00, 89, 84, 24, A0, 00, 00, 00, E8, D2, F7, 00, 00, 85, C0, 75, 0A, B9, 1C, 00, 00, 00, E8, 54, 01, 00, 00, E8, 1F, BB, 00, 00, 85, C0, 75, 0A, B9, 10, 00, 00, 00, E8, 41, 01, 00, 00, B9, 01, 00, 00, 00, E8, A7, 96, 00, 00, E8, 22, F7, 00, 00, 90, E8...
 
[+]

Code size:
421 KB (431,104 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
FAHConsole

Command:
C:\Program Files\file association helper\fahconsole.exe


The file FAHConsole.exe has been discovered within the following programs.

BUSB  by GIGABYTE
www.GIGABYTE.com
8% remove it
File Association Helper  by WinZip Computing, S.L.
53% remove it
 
Powered by Should I Remove It?

Scan FAHConsole.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.