» Xpress Installer
Digital Signature
Analysis
Files (3,137)
Downloads (6)
Related (3)

Xpress Installer

Publisher Information

Xpress Installer is a software publisher located in San Francisco, California in the United States*. The company is a primary distributor of unwanted software.

Authority:

thawte, Inc.

Valid from:

4/28/2015 7:00:00 PM

Valid to:

4/28/2016 6:59:59 PM

Subject:

CN=Xpress Installer, OU=Xpress Installer, O=Xpress Installer, L=San Francisco, S=California, C=US

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

426a40a18f4f86a9762818361d0bb535

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.InstallMetrix (M)

100.00%

1 / 68 (Adware)

criminalcase_game_downloader.exe (4a3d27ee6f4c9ac2d65ca73066c92b82)

1 / 68 (Adware)

happywheels_game_downloader.exe (823dd2874e749528a738549a89465881)

1 / 68 (Adware)

chrome_updater_setup.exe (04d949c743568624bff582b5073db90a)

1 / 68 (Adware)

flashplayerpro_setup.exe (7d6cdcbc2e335b20fd1cae74326d533e)

1 / 68 (Adware)

firefox_updater.exe (6ec148611a119bb1dac4395baa4ca5dd)

1 / 68 (Adware)

chrome_updater.exe (dd40773336a2b2f64acf7d7495de92c2)

1 / 68 (Adware)

subwaysurfers_game_downloader.exe (390f0cff149c519455e0385794f502ad)

1 / 68 (Adware)

chrome_updater_setup.exe (cb26d236cfad032525416f6a49343576)

1 / 68 (Adware)

windowsmoviemaker_setup.exe (3a6643fb1859210113b42116d3a60404)

1 / 68 (Adware)

chrome_updater.exe (8e00fcadccf15709d7f278ddc66c3aa6)

1 / 68 (Adware)

chrome_updater.exe (c103e21356d85c7f53e671ee7a050868)

1 / 68 (Adware)

thesims_downloader.exe (0437acc07b28221a0bede737ab1b415b)

1 / 68 (Adware)

thesims_downloader.exe (8fea2d05d9af0a8b7c40d9d7f7ddf565)

1 / 68 (Adware)

thesims_downloader.exe (68849a63e13d49ace0f5b4c4c268f3fa)

1 / 68 (Adware)

kikmessenger_downloader.exe (f344197d783429687097c2c5d1fea574)

1 / 68 (Adware)

clashofclans_game_downloader.exe (0609b53354a876f43e52003781b3f523)

1 / 68 (Adware)

chrome_updater_setup.exe (4ecc7a2c720e14b0248a10f81a8dd3fc)

1 / 68 (Adware)

guesstheemoji_game_downloader.exe (41d1c04e885f56611e3e90466beaa3b7)

1 / 68 (Adware)

guesstheemoji_game_downloader.exe (97d82cda1d98a6518a3a5c8f57cb9476)

1 / 68 (Adware)

guesstheemoji_game_downloader.exe (38948afe808fcd93d865f8f427e6cba8)

1 / 68 (Adware)

crossyroad_game_downloader.exe (ddc9a174fa6ed71ae2b31d9c0151f0f5)

1 / 68 (Adware)

crossyroad_game_downloader.exe (17fb2a56a6bf1d54b7b254993649579f)

1 / 68 (Adware)

crossyroad_game_downloader.exe (8c26746b91114c42687d0cab57480aca)

1 / 68 (Adware)

flashplayerpro_setup.exe (f0977444653a6c5120eb871ebaea8cd6)

1 / 68 (Adware)

zedge_downloader.exe (2c3520336a11bed97bc8d070feaaa48e)

1 / 68 (Adware)

chrome_updater.exe (81d74a9d2d5e574b7298d51091403f5c)

1 / 68 (Adware)

furious7_movie_downloader.exe (804f4a4af39d924a61c0cf3131391f02)

1 / 68 (Adware)

flashplayer_updater.exe (74f1a740f8242cfd87bfffd498fcb59b)

1 / 68 (Adware)

thesims4_game_downloader.exe (6506465bcf4eecea38e657cfcae775fe)

1 / 68 (Adware)

chrome_updater_setup.exe (9e6384ed3614117531b31e1658d3c13a)

Latest 30 of 3,137 files

Downloads URLs for files signed by Xpress Installer.

1 / 68 (Adware)

http://pcfileddl.com/download.php?campaignId=280&filename=Chrome_Updater_Setup.exe&subid1=16yar&subid2=sup&subid3=ylp8a_tca7c&subid4=nwbs_ronpgun2exch&subid5=lp1b_ch_22862_1955 (04d949c743568624bff582b5073db90a)

1 / 68 (Adware)

http://pcfileddl.com/download.php?campaignId=281&filename=Chrome_Updater.exe&subid1=88ess&subid2=sup&subid3=buh8m_cir9a&subid4=RONus2_RONus2&subid5=hublp7_ch_7532-T_param2 (dd40773336a2b2f64acf7d7495de92c2)

1 / 68 (Adware)

http://pcfileddl.com/download.php?campaignId=20&filename=SubwaySurfers_Game_Downloader.exe&subid1=16yar&subid2=doga&subid3=ret8a_jcm&subid4=fbgm_subwaysurfers&subid5=lp3c_nobs_param1_NoKW (390f0cff149c519455e0385794f502ad)

1 / 68 (Adware)

http://pcfileddl.com/download.php?campaignId=61&filename=FlashPlayerPro_Setup.exe&subid1=50flo&subid2=fup&subid3=buh8m_cir9a&subid4=ron_flv&subid5=flv8_NoBrow_noads_8074_0509 (1adacc215d08f8dc6b89499ad2e13084)

The following publishers (by Authenticode signature organization name) are related.

Start Installer

File Validated

Required Installs

* Note, the details and description above are based on the code signing digital signature issued to Xpress Installer by thawte, Inc. on April 28, 2015 with the serial number '426a40a18f4f86a9762818361d0bb535'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.