home

winzip20-br.exe

MD5:
15ea0f52ae3ef7b03d4b910bfaeba066

SHA-1:
0254a8c33e5b8be80ac6ac6cf5535027b66a0f4f

SHA-256:
68535c5f803453c887b2b6837fcb27e1c3f380bc31b1c4610c9553246b79e9c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 11:46:04 AM UTC  (today)

File size:
498 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\winzip20-br.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:XPBvQK+Z/4W2nSCcE+1r01fWFBxnyOt3ugNGWhnVs3UMqqVIViHCRt/H:X55+cnSC8yIcFgoWhnVAUr3yqhH

Entry point:
4F, BF, 50, 3F, FA, EE, 74, 76, AD, 2F, 0E, C8, EB, 72, 5D, 1C, 1D, 94, 6A, C5, 23, 38, CE, F0, 80, 6D, 81, 8E, 0E, 0C, B3, 4D, FB, 55, E0, 00, B5, CF, 15, FE, 63, 34, 7D, AB, A8, 68, 9D, 66, F8, 86, 65, 0C, 2E, CB, E5, 72, FF, 9A, 44, 06, 69, F6, 99, 81, D5, 5E, 2A, FD, 6A, 9A, AF, 50, AF, 8D, D1, F3, 41, E8, 61, 2A, 39, 90, 95, 53, A7, AE, 3A, 3C, B7, 37, 85, 80, EB, A8, 71, E3, DD, C2, 74, FE, 14, 5B, C7, 02, A9, 67, 44, A5, BF, 35, FE, 72, CD, 73, E3, 51, 58, 97, EF, AA, C6, 06, 5F, DF, A9, 38, 87, FE...
 
[+]

Entropy:
7.5415

The file winzip20-br.exe has been seen being distributed by the following URL.

http://download.winzip.com/gl/.../winzip20-br.exe

Scan winzip20-br.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.