home

newwzp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.reqxtmum.com.
MD5:
2eb51e24af0177f8c73d1f0e7247b33e

SHA-1:
bf6e7772e07dbe875c244d6f78fc6f5710858fc3

SHA-256:
126be6a7fb04eadf036ee3bfd9711ccc485c4d2b1c0fe863908e6f2a349332cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:52:17 PM UTC  (today)

File size:
1 MB (1,067,528 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\newwzp.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24576:Zf5smhV90jd3NBnOJeZvU73SVcshOWzd8qNXv8KzbpqaKp+tKJQVIS6U:JygqpNZ7Mo0NqNUKRqhUy/TU

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, BB, F4, 6D, 94, EC, 1C, 76, 00, 00, 00, 00, 00, 7F, 00, 00, 00, 00, 00, 00, 00, AB, 60, F2, A6, BB, F5, 4D, BA, 59, 07, 00, 40, 56, 18, E2, A0, CF, 95, F4, 82, 28, 35, 94, B3, D4, 55, CD, 77, 88, E5, BE, 04, 6D, CD, 00, FD, 2B, A4, 69, CE, 9C, A5, 1E, E6, C2, D0, 88, 27, 26, 20, 1D, C5, 53, 02, 09, C1, 55, 56, 9D, 1F, D2, 4C, 36, A5, F8, 9C, 6D, 5B, 4D, C6, FC, DF, 9F, 56, A1, AB, 4B, 7E, 26, 5D, 2E, D3, 0D, E8, 6E, 22, AA, 11, EC, D8, D1, 06, 7F, 23, 00, 00, F2, ED, 89, 92...
 
[+]

Entropy:
7.9998  (probably packed)

The file newwzp.exe has been seen being distributed by the following URL.

http://www.reqxtmum.com/Public/softs/lim6/9287/.../newwzp.exe

Scan newwzp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.