home

Helper64.exe

Proxifier Portable Edition

Initex

Publisher:
Initex  (signed and verified)

Product:
Proxifier Portable Edition

Description:
Proxifier Portable Edition 64-bit Helper

Version:
3, 0, 2, 1

MD5:
fa64805b264c61b67a0a01ed4e7e12f7

SHA-1:
7b91091c267c89c4ca4bf2a3ff70c9409fab3b5b

SHA-256:
81bbe5d6cce462b8ba21e17b5ae6958e1c75b9b505b5488ab53ce1dd8f950586

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 4:29:09 PM UTC  (today)

File size:
47.7 KB (48,880 bytes)

Product version:
3, 0, 2, 1

Copyright:
Copyright © 2011 Initex. All rights reserved.

Original file name:
Helper64.exe

File type:
Executable application (Win64 EXE)

Language:
Russian (Russia)

Digital Signature
Signed by:
Initex

Authority:
The USERTRUST Network

Valid from:
4/18/2011 4:30:00 AM

Valid to:
4/18/2012 4:29:59 AM

Subject:
CN=Initex, O=Initex, STREET=Savushkina 17 A 10N, L=Saint Petersburg, S=Saint Petersburg, PostalCode=197183, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E3B918C6C1F40083BE63339749396F6D

File PE Metadata
Compilation timestamp:
11/24/2011 11:35:18 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
768:ZLPwFJjSG+PKuok7qsfnM7ttzxk5VYImkpQrAc/yYte95Lya5XCL7ULg8hW8:tESvS4qsfnk5a5VhjQsBd5XCLwE8Z

Entry address:
0x19B4

Entry point:
48, 83, EC, 28, E8, 93, 27, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 05, A7, 00, 00, FF, 15, BF, 66, 00, 00, 4C, 8B, 1D, F0, A7, 00, 00, 4C, 89, 5C, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 45, 55, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, B0, A6, 00, 00, 48, 89, 44, 24...
 
[+]

Entropy:
5.9533

Code size:
24.5 KB (25,088 bytes)

The file Helper64.exe has been discovered within the following programs.

FaVPN Proxy Connection  by FaVPN
www.favpn.in
About 1% of users remove it
SibVPN Socks Share3  by SibVPN
www.sibvpn.org
About 7% of users remove it
 
Powered by Should I Remove It?

Scan Helper64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.