home

zwz0521.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from dl05.win10-apps.com.
MD5:
ee30554adcf0548886b3640f3fcb711f

SHA-1:
ce9dd18cea9b096a6ce41c69d118c7d01ee9bcda

SHA-256:
1735aa1056adc928d5894255fc827ddcda1716ab63c066da6cf519654a56c74e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:37:15 PM UTC  (today)

File size:
20.9 MB (21,927,160 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\zwz0521.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:Cf/g3WctdRkLHnzn1dm6sI4fIaaFA+ZnbhsdUifE3tsBsfyk55R8n1giuWLkubVG:4gMhVsRfIaLgqBfE3iSfz55R8n1giNQp

Entry point:
37, 7A, BC, AF, 27, 1C, 00, 03, EF, 67, 10, 2D, B3, 94, 4E, 01, 00, 00, 00, 00, 25, 00, 00, 00, 00, 00, 00, 00, 9B, 3D, 07, A4, 00, 36, 88, 18, CF, 53, E8, 37, 2C, 27, F6, 87, 68, 1C, 07, AB, 53, A7, 72, 9F, 5F, 5C, D5, 30, E7, 37, 88, DF, 0E, 3E, 95, F5, E8, 0C, 85, E1, F8, 8B, 81, 90, 4F, EB, A5, FE, 6F, D0, 37, F9, 3E, F5, 34, 7D, B5, E9, BD, CE, CD, 79, 79, C8, 60, 1C, A1, 90, AE, A0, B3, 31, 29, 4C, 6E, EB, 29, 80, 30, 78, 8A, D6, 0A, AF, 76, A5, AD, 54, 00, C6, 86, E5, 4F, BD, C8, 29, 1A, 73, C5, B1...
 
[+]

The file zwz0521.exe has been seen being distributed by the following URL.

http://dl05.win10-apps.com/download/.../zwz0521.exe

Scan zwz0521.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.