ZT.exe

ZoomText 9

Ai Squared

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ZoomText’. This is installed with ZoomText 9.1. The file has been seen being downloaded from content.wuala.com.
Publisher:
Ai Squared

Product:
ZoomText 9

Version:
9.11.0.112

MD5:
b003d4064be9ed139f9bc71f3eadb5a3

SHA-1:
79a5498f09525f4bc21d5229ba442ec121b54cd2

SHA-256:
10ba6b731e5543378dcd9b259a13b94a9ed3611c90b63bd93e3f90dbbf4d21a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 6:06:04 PM UTC  (today)

File size:
1.8 MB (1,891,655 bytes)

Product version:
9.11

Copyright:
Copyright © Ai Squared 1988-2007, All Rights Reserved

Trademarks:
ZoomText is a registered trademark of Ai Squared.

Original file name:
ZT.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\zoomtext 9.1\zt.exe

File PE Metadata
Compilation timestamp:
5/7/2007 5:03:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:05wCXT4zARBkFePUOaB0034DIKFt7m2QjzDXTow8WlEuoHAP4qGCCX1sm3hS0S9Y:w9G0HFnuDXTow8WlEuoHAP1GCCX1sm3h

Entry address:
0x72782

Entry point:
6A, 74, 68, 98, D3, 47, 00, E8, 8A, 04, 00, 00, 33, DB, 89, 5D, E0, 53, 8B, 3D, 80, 41, 47, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, 1C, 45, 47, 00, 59, 83, 0D, D4, E1, 49, 00, FF, 83...
 
[+]

Entropy:
6.5359

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
460 KB (471,040 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ZoomText

Command:
"C:\Program Files\zoomtext 9.1\zt.exe" \autostart


The file ZT.exe has been discovered within the following program.

ZoomText 9.1  by Ai Squared
Publisher's description - “ZoomText Magnifier enlarges and enhances everything on your computer screen, making all of your applications easy to see and use. Our revolutionary new ‘xFont’ technology displays crystal clear text at all magnification levels.”
www.aisquared.com/zoomtext
1% remove it
 
Powered by Should I Remove It?

The file ZT.exe has been seen being distributed by the following URL.

Scan ZT.exe - Powered by Reason Core Security