home

freeziphelper.exe

FreeZipOpener

Nicetex Ltd

The application freeziphelper.exe by Nicetex has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Free Zip Helper by Free Zip which is a potentially unwanted software program.
Publisher:
Nicetex Ltd  (signed and verified)

Product:
FreeZipOpener

Version:
1.0.0.0

MD5:
c21f9d63a794f662a5611bc612d751b1

SHA-1:
67d3f2a327683746bdfa871e45367436e554be82

SHA-256:
e0f33d1152a5e85f620dee8ba9f5df0aedc702983db9b8b50e6486c037bbe451

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 2:38:34 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Nicetex.N
14.8.15.21

File size:
452.6 KB (463,480 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
FreeZipViewer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\free zip helper\freeziphelper.exe

Digital Signature
Signed by:
Nicetex Ltd

Authority:
VeriSign, Inc.

Valid from:
9/29/2013 7:00:00 PM

Valid to:
9/30/2015 6:59:59 PM

Subject:
CN=Nicetex Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Nicetex Ltd, L=Hong Kong, S=Hong Kong, C=HK

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DD8F3D5B9C9F70F512CB8B8D6A2D2D0

File PE Metadata
Compilation timestamp:
10/11/2013 12:46:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:VvltYFJSI0xfnT7Z1318uVY6mJcPtW9x0plJ7h31PHVsjfnTH:FltYF0nZ131pISpTL/wL

Entry address:
0x6914E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.9852

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
412.5 KB (422,400 bytes)

The file freeziphelper.exe has been discovered within the following program.

Free Zip Helper  by Free Zip
Publisher's description - “Support more than 50 compression and encoding formats 001, 7Z, ACE, ARC, ARJ, BH, BZIP2, BZ2, CAB, CHM, CHW, CPIO, DEB, DMG, DOC, ENC, EXE, GZ, GZIP, HFS, HXS, ISO, JAR, LHA, LZH, LZMA, MSI, PPT, RAR, RPM, TAR, TBZ, TGZ, TXZ, UU, UUE, WAR, WinRAR, WIM, XAR, XXE, XZ, XLS, Z, ZIP, ZIPX and ZOO.”
68% remove it
 
Powered by Should I Remove It?

Remove freeziphelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.