home

zwz0521.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl05.win10-apps.com.
MD5:
dbacefb7766a947e88cc26d5cb4b2b55

SHA-1:
1f49790061f635b19be8bdf5dfee03589b0f3170

SHA-256:
e5c5c1a0a6eed016e39fe7d3724b5222dae494ca3d4a4458e86f1dc8dc7fecc9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 12:58:32 AM UTC  (today)

File size:
5.7 MB (6,020,378 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\zwz0521.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:q99bVVJ3ncY/Ddm3cj7BDg3tNz7T1AO2Lw4TGSNQHiSUt6OaGDxR2gdKbC3X:qbVVlcYg3cBDg3tp7RkLCQQ1UtdDxR2C

Entry point:
37, 7A, BC, AF, 27, 1C, 00, 03, EF, 67, 10, 2D, B3, 94, 4E, 01, 00, 00, 00, 00, 25, 00, 00, 00, 00, 00, 00, 00, 9B, 3D, 07, A4, 00, 36, 88, 18, CF, 53, E8, 37, 2C, 27, F6, 87, 68, 1C, 07, AB, 53, A7, 72, 9F, 5F, 5C, D5, 30, E7, 37, 88, DF, 0E, 3E, 95, F5, E8, 0C, 85, E1, F8, 8B, 81, 90, 4F, EB, A5, FE, 6F, D0, 37, F9, 3E, F5, 34, 7D, B5, E9, BD, CE, CD, 79, 79, C8, 60, 1C, A1, 90, AE, A0, B3, 31, 29, 4C, 6E, EB, 29, 80, 30, 78, 8A, D6, 0A, AF, 76, A5, AD, 54, 00, C6, 86, E5, 4F, BD, C8, 29, 1A, 73, C5, B1...
 
[+]

The file zwz0521.exe has been seen being distributed by the following URL.

http://dl05.win10-apps.com/download/.../zwz0521.exe

Scan zwz0521.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.