home

freeziphelper.exe

FreeZipOpener

Nicetex Ltd

The application freeziphelper.exe by Nicetex has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Free Zip Helper by Free Zip which is a potentially unwanted software program.
Publisher:
Nicetex Ltd  (signed and verified)

Product:
FreeZipOpener

Version:
1.0.0.0

MD5:
f3612da0f74d3676fe341cb25e7004e3

SHA-1:
1cbda33a327b97d6ffeaee023861c697feba8fc7

SHA-256:
dbb1bbabfa7218d444d368544ec1214be07b29ac0af2d1b8066e56e66bd9b1ef

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 3:16:38 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.4.12.8

File size:
452.6 KB (463,480 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
FreeZipViewer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\free zip helper\freeziphelper.exe

Digital Signature
Signed by:
Nicetex Ltd

Authority:
VeriSign, Inc.

Valid from:
9/30/2013 2:00:00 AM

Valid to:
10/1/2015 1:59:59 AM

Subject:
CN=Nicetex Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nicetex Ltd, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DD8F3D5B9C9F70F512CB8B8D6A2D2D0

File PE Metadata
Compilation timestamp:
9/25/2013 12:21:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:cvltYFJSI0xfnT7Z1318uVY6mJcPtW9x0plJ7h31PHVssfnTe:4ltYF0nZ131pISpTL/LC

Entry address:
0x6914E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
412.5 KB (422,400 bytes)

The file freeziphelper.exe has been discovered within the following program.

Free Zip Helper  by Free Zip
Publisher's description - “Support more than 50 compression and encoding formats 001, 7Z, ACE, ARC, ARJ, BH, BZIP2, BZ2, CAB, CHM, CHW, CPIO, DEB, DMG, DOC, ENC, EXE, GZ, GZIP, HFS, HXS, ISO, JAR, LHA, LZH, LZMA, MSI, PPT, RAR, RPM, TAR, TBZ, TGZ, TXZ, UU, UUE, WAR, WinRAR, WIM, XAR, XXE, XZ, XLS, Z, ZIP, ZIPX and ZOO.”
68% remove it
 
Powered by Should I Remove It?

Remove freeziphelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.