IExpress, a component of Windows 2000 and later versions of the operating system, is used to create self-extracting packages from a set of files.

IExpress (IEXPRESS.EXE) can be used for distributing self-contained installation packages (INF-based setup executables) to multiple local or remote Windows computers.

It can also be used from a Windows command processor shell or batch file to create custom instal­lation packages, eventually unattended (i.e., auto­mated operation): IEXPRESS /N drive_letter:\directory_name\file_name.SED IExpress Wizard interface guides the user through the process of creating a self-extracting package.

It then allows the user to specify a title for the package, add a confirmation prompt, add a license agreement that the end-user must accept in order to allow extraction, select files to be archived, set display options for the progress window, and finally, specify a message to display upon completion.

[3][4] Additionally, because of the way Windows User Account Control handles installers, these vulnerabilities allow for privilege escalation.