home

zpex.exe

Insight Software Solutions, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Insight Software Solutions, Inc.  (signed and verified)

Description:
Zip Express

Version:
2.7.4.1

MD5:
c6e696b6b8d08cadb8394ecdb9190d38

SHA-1:
00b449d0bd51a9a66f10ba5a2319c5e71fba86cc

SHA-256:
8d53d022e6fde15dc2b6b34795c16fc38f5e89caa3cbb34fcf4cc36d9c590755

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:07:23 AM UTC  (today)

File size:
4.4 MB (4,635,072 bytes)

Copyright:
(c) 2010 Insight Software Solutions, Inc

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\zpex.exe

Digital Signature
Signed by:
Insight Software Solutions, Inc.

Authority:
The USERTRUST Network

Valid from:
3/17/2010 1:00:00 AM

Valid to:
3/17/2013 12:59:59 AM

Subject:
CN="Insight Software Solutions, Inc.", O="Insight Software Solutions, Inc.", STREET=PO Box 106, STREET=120 South Main, L=Kaysville, S=Utah, PostalCode=84037, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
7C1261A280A96B8A3FB99AB2E0449663

File PE Metadata
Compilation timestamp:
8/16/2007 8:13:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
98304:+BfshaSKU1VxU5/rGrkcqgUmWZ2iaB5/sTG9:bhazU1Q/CocYmdJ6U

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 7C, 05, 00, 00, 53, 56, 57, BE, 04, 01, 00, 00, 56, 8D, 85, 90, FD, FF, FF, 33, DB, 50, 53, 89, 5D, F4, FF, 15, 38, 20, 40, 00, 56, 8D, 85, 90, FD, FF, FF, 50, 50, FF, 15, 34, 20, 40, 00, 8B, 3D, 30, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 68, 00, 00, 00, 80, 8D, 85, 90, FD, FF, FF, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 82, 01, 00, 00, 8D, 85, 8C, FC, FF, FF, 50, 56, FF, 15, 2C, 20, 40, 00, 8D, 85, 94, FE, FF, FF, 50, 53, 68, 58, 20, 40, 00, 8D, 85, 8C, FC, FF, FF, 50, FF, 15, 28...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1024 Bytes (1,024 bytes)

The file zpex.exe has been seen being distributed by the following 6 URLs.

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1429105687&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=R220mYGxXW-wNTbs3k6G7eN9T-Iv~yNdwAovVGYeDkdpn4nBqYoxf6-fALbBVlWjB4ThRezMB-ztJB~eXdVQxRmqExYCKzwYQZGX4CE~XkUaWzM8UvSE-ptup6wYtt2EQPB2KepYC7~XLmLcEZGoqASp7KWnyviHbw~kplkha6E_&filename=zpex.exe

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1465463438&Signature=K~esTFSnScxcXANDWvnNROssL3FrULto3hqiwz4rN8UcqrBQXiBiJPODu8hA2eV9o5E--Yh1lCPKuzJGLz3bGSHyp~5anfOKMaOr5OUjxvs7EbFwapA~dKO94TQ2WQjJMammmz~qCWUHtFa2CrqM23TT3TsgFWUpAxcWt4Rxc0A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zpex.exe

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1460874842&Signature=bcLZao~NSgsKio54-4UZ-ilnYTZ3loxp3DCWSDtym~vIvOimD3pPTrYtIKlR-nMKFXR3KOcwV1QCywkKpNsxSigDjUrv-MWF8fMyqL59cPNSWc0KwEpwuK5irsy3GOZCF1W54Wqb~4DCwWUrVx803kdpeNQrMZPeGC0VNKMLLuo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zpex.exe

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1458300028&Signature=U3znCRQ3MXgQeEAHeQLN0Ee7W3yeOznFqFzl8rfUS8MJS-iRs9XB0gvb2raWiu0RqBthhHHH2-Rl6oHAsHQYnbVehVUqOTg5Z75b27gn57BOoZ9xQVOc76r11Eb9z4zso8UGwgRFJlnsvVOAztKyYn7zl9mAZ7vyFRck89bLTZ4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zpex.exe

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1452481779&Signature=Zh~vj83j9-2W0Et7VaC3TAOPJg83XYJrY0882xz-TW7RETUqm9qoXwVBSXlQKp13MHO6AbXi6cSV7b5y8iOwe-C5WFBBZ9QeRbxgNoQx8FN49ToAII-7VfyTJa30AC620C8RFFolr6fmc3op3DMkZTPQDCPIr05pdTTggbdCO8s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zpex.exe

http://gsf-cf.softonic.com/00b/449/.../file?SD_used=0&channel=WEB&fdh=no&id_file=9504&instance=softonic_es&type=PROGRAM&Expires=1452759104&Signature=ea2XTB4szM-Xyix2KD8cgMYACnse3f9NG5Ko1DLfpgfFWPaZPrtUVn8vayMhdlG~7UYbycYABbSUoGA~Mcic8vOti1uyNk3AVsVghZQIY2zuNhAQDCF6LIr16FgovOLBZskuPHLKhGsDCkpBawKO-r31Vw~OZ-JOJuMRxzb5Kxk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=zpex.exe

Scan zpex.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.