home

newwzp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.reqxtmum.com.
MD5:
7e31157f8e1c1acde6b65b4f21983267

SHA-1:
c72dc3b4f632c6f762867fd900fc59d7d3694e73

SHA-256:
de1b597aa414b708f1270a5c71b1cafe064e60165397c7df82f6f4d825648b09

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:46:27 PM UTC  (today)

File size:
2.8 MB (2,901,755 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\newwzp.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:JygqpNZ7Mo0NqNUKRqhUy/Ta64gQRxoOVX0igCMrGOMmdCnb86SxfG8p:Jy/pNZQo0NqjI0gQRhVtQrGkdC0c8p

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, BB, F4, 6D, 94, EC, 1C, 76, 00, 00, 00, 00, 00, 7F, 00, 00, 00, 00, 00, 00, 00, AB, 60, F2, A6, BB, F5, 4D, BA, 59, 07, 00, 40, 56, 18, E2, A0, CF, 95, F4, 82, 28, 35, 94, B3, D4, 55, CD, 77, 88, E5, BE, 04, 6D, CD, 00, FD, 2B, A4, 69, CE, 9C, A5, 1E, E6, C2, D0, 88, 27, 26, 20, 1D, C5, 53, 02, 09, C1, 55, 56, 9D, 1F, D2, 4C, 36, A5, F8, 9C, 6D, 5B, 4D, C6, FC, DF, 9F, 56, A1, AB, 4B, 7E, 26, 5D, 2E, D3, 0D, E8, 6E, 22, AA, 11, EC, D8, D1, 06, 7F, 23, 00, 00, F2, ED, 89, 92...
 
[+]

Entropy:
7.9999  (probably packed)

The file newwzp.exe has been seen being distributed by the following URL.

http://www.reqxtmum.com/Public/softs/lim6/9287/.../newwzp.exe

Scan newwzp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.