home

newwzp.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 113.171.224.243 and multiple other hosts.
MD5:
8930c5dd16d45d9e08ceff3dc7218104

SHA-1:
d42d86b24c6437b09aee6048bbfec20fb0bd1967

SHA-256:
994e9f4b4930fede9a1c2de4f445194ed107ff334d4a2a996ff8393db0161172

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:15:55 AM UTC  (today)

File size:
2.8 MB (2,905,688 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\newwzp.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:aApbk6Wtnx9+U5yiqmHfESbjV5OCV9f1RER5d/hOtealaSXVgQFILWY5l6PCnPK:Dpw6Cx9+UylSlk49dG5HclaG2LZjK

Entry point:
6D, 20, E6, F5, 7D, 46, 00, 5E, BB, C0, D6, C4, 49, 0C, 76, 00, 00, 00, 00, 00, 7F, 00, 00, 00, 00, 00, 00, 00, 43, C8, 95, 32, BB, F5, 4D, BA, 59, 07, 00, 40, 56, 18, E2, A0, CF, 95, F4, 82, 28, CC, 20, E7, 0E, 1F, 7C, 65, F4, 3E, 4F, 71, 58, 5E, 27, 3A, B9, B4, 4F, C7, E3, 5A, 17, 82, 3B, 1D, FB, B6, 9C, CB, 3D, ED, 3F, 17, BF, 4D, DA, E9, C5, 11, 3A, 39, 2D, C9, 02, 98, E4, 2F, FB, 2B, BC, 07, 12, 39, 7E, 1F, D9, 54, 9F, 99, 0D, D8, 0E, 7F, 1D, 75, 6C, EA, 2C, 82, 83, 9C, 81, 9F, 3D, 93, 36, FE, E9, DC...
 
[+]

The file newwzp.exe has been seen being distributed by the following 10 URLs.

http://113.171.224.243/.../newwzp.exe

http://113.171.224.241/.../newwzp.exe

http://113.171.224.210/.../newwzp.exe

http://113.171.224.176/.../newwzp.exe

http://113.171.224.205/.../newwzp.exe

http://www.reqxtmum.com/Public/softs/lim6/9287/.../newwzp.exe

http://113.171.224.165/.../newwzp.exe

http://www.reqxkgtm.com/Public/softs/lim6/9287/.../newwzp.exe

http://www.reqxjykn.com/Public/softs/lim6/9287/.../newwzp.exe

http://www.reqxnjpl.com/Public/softs/lim6/9287/.../newwzp.exe

Scan newwzp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.