home

zip.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from stahlworks.com and multiple other hosts.
MD5:
83af340778e7c353b9a2d2a788c3a13a

SHA-1:
55c5a72010291fca2275ccfb5b497dd0bac11a60

SHA-256:
e9929598c98359773b7c51e3c4461d0f99b1703790ff775aee3c63a9a9a74ca8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/14/2025 1:22:32 AM UTC  (today)

File size:
132 KB (135,168 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\zip.exe

File PE Metadata
Compilation timestamp:
7/2/2006 2:53:19 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
7.10

CTPH (ssdeep):
3072:8yiIL2aUStYI4kOojhmlDUaKhVV4dD+mO3teRl:k2bukOkhK4aKhVV/

Entry address:
0xF805

Entry point:
6A, 18, 68, 88, D6, 41, 00, E8, C3, 5E, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 13, 60, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, D0, A0, 41, 00, 8B, 4E, 10, 89, 0D, 90, C3, 43, 00, 8B, 46, 04, A3, 9C, C3, 43, 00, 8B, 56, 08, 89, 15, A0, C3, 43, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 94, C3, 43, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 94, C3, 43, 00, C1, E0, 08, 03, C2, A3, 98, C3, 43, 00, 33, FF, 57, FF, 15, AC, A0, 41, 00, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
100 KB (102,400 bytes)

The file zip.exe has been discovered within the following programs.

ADAC TourGuide Deutschland  by ADAC Verlag GmbH
tourguide.alpstein.de
About 5% of users remove it
Articulate Studio '09 Pro  by Articulate
www.articulate.com
About 1% of users remove it
B&N NOOK DRM Remover  by eBook Converter
www.myebooksoft.com
22% remove it
Cisco Network Assistant  by Cisco Systems, Inc.
Publisher's description - “Cisco Network Assistant simplifies wired and wireless network management for networks up to 80 devices with its intuitive GUI and a task-based menu.”
www.cisco.com
11% remove it
Cisco Packet Tracer 5.3  by Cisco Systems, Inc.
Publisher's description - “Cisco Packet Tracer is a powerful network simulation program that allows students to experiment with network behavior and ask “what if” questions.”
www.cisco.com/web/learning/netacad/course_catalog/PacketTracer.html
5% remove it
Color Swatch Add-in for PowerPoint  by Shyam Pillai
www.skplive.com/swatch.htm
About 1% of users remove it
dataSESMT  by RSData
www.rsdata.com.br
About 1% of users remove it
Nook DRM Removal  by eBook Converter
Publisher's description - “Nook DRM Removal quickly and easily remove DRM protection from Barnes & Noble epub ebook. it produce a epub ebook that you read in other computer or other e-reader device, like Sony Reader, iPad, user also can print BN ebook without limitation.”
www.ebook-converter.com
25% remove it
Ovitec 2011  by Agritec Software
About 1% of users remove it
PDF ePub DRM Removal  by eBook Converter
Publisher's description - “PDF ePub DRM Removal quickly and easily remove ebook ADEPT DRM protection for PDF epub files with 1-click. user can view PDF ePub ebook on iPad, NOOK, Sony Reader or other device without limitation, user also can print Digital Edition ebook.”
19% remove it
 
Latest 20 of 18 programs
Powered by Should I Remove It?

The file zip.exe has been seen being distributed by the following 2 URLs.

http://stahlworks.com/.../zip.exe

http://stahlforce.com/.../zip.exe

Scan zip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.