home

abzilczl.exe

MD5:
1264314f9a8aca4b61f458740141304e

SHA-1:
f4a0a54542b0418a0978afc78ff735ba65eb52e7

SHA-256:
81afc1015055aefce3034cbf42414ca6b807b3fe279a1f5d3851de0f79415f5a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 8:39:00 PM UTC  (today)

File size:
116 KB (118,750 bytes)

Common path:
C:\users\{user}\appdata\local\temp\abzilczl.exe.part

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
1536:chmeADF9cqfALLH/PraddzRmQN1qNBp+lMbjCGOA3NHZu1kSJIDtTV:QRC9cqfALL/Pr+dN4NBpiM/HOA3ZcI9V

Entry address:
0x3D2A0

Entropy:
6.1346

Code size:
240.7 KB (246,496 bytes)

The file abzilczl.exe has been seen being distributed by the following URL.

http://intva31.encorewebsite.info/dl-pure/1203367/.../?bc=1203367&checksum=81912335&ephemeral=1&filename=adobe_flash_player.exe&cb=-1322507373&hashstring=xeBXvQYZDJju&usefilename=true&executableroutePath=1203981&stub=true

Scan abzilczl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.