home

qwrbzkxza.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1384.mediafire.com and multiple other hosts.
MD5:
80d333fe31ea2e0b9282855ca3bc7cf2

SHA-1:
4a42e7e24b7eb40f21b3cbc64a7e58f7c08aff25

SHA-256:
13eef0446fbb9f041796392ba352ffdf07a582ae9dfc7cd8f58b2a0e1ba7e72a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:29:50 AM UTC  (today)

File size:
58.9 MB (61,735,132 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\qwrbzkxza.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
1572864:n0G775yhR/GXavLM9N6byXOXqeTzi4YuOR+uxV:nJ0hRuYLONfXYi4Yu2+uP

Entry address:
0x8A5C

Entry point:
55, 8B, EC, 81, C4, EC, FE, FF, FF, 33, C0, 89, 85, EC, FE, FF, FF, B8, E4, 89, 40, 00, E8, 31, B3, FF, FF, 33, C0, 55, 68, B4, 8B, 40, 00, 64, FF, 30, 64, 89, 20, E8, 4A, B4, FF, FF, 33, D2, 52, 50, 8D, 85, F0, FE, FF, FF, E8, 8B, AF, FF, FF, 8D, 95, F0, FE, FF, FF, B8, E0, AE, 40, 00, E8, 8F, AA, FF, FF, A1, E0, AE, 40, 00, E8, 1D, AC, FF, FF, 50, 68, C0, 8B, 40, 00, E8, 36, B4, FF, FF, E8, ED, B5, FF, FF, 68, 05, 01, 00, 00, 68, D8, AD, 40, 00, 6A, 00, E8, F0, B3, FF, FF, 8B, C8, BA, D8, AD, 40, 00, A1...
 
[+]

Entropy:
7.9987

Developed / compiled with:
Microsoft Visual C++

Code size:
31 KB (31,744 bytes)

The file qwrbzkxza.exe has been seen being distributed by the following 40 URLs.

http://download1384.mediafire.com/2l27olyj20ag/.../Plants contra Zombis 2.exe

http://download1621.mediafire.com/g792svjvpvhg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/20nt24l37yfg/.../Plants contra Zombis 2.exe

http://download2085.mediafire.com/9c3bnf3qjxlg/.../Plants contra Zombis 2.exe

http://download2139.mediafire.com/9u5hh79qr1zg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/99i01pbtaw6g/.../Plants contra Zombis 2.exe

http://download1825.mediafire.com/1xbsqomcyvug/.../Plants contra Zombis 2.exe

http://download1006.mediafire.com/bkeomhfa5fsg/.../Plants contra Zombis 2.exe

http://download1568.mediafire.com/044dy746xzlg/.../Plants contra Zombis 2.exe

http://download2085.mediafire.com/bjgz0o9fjmyg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/hfwy5a602hwg/.../Plants contra Zombis 2.exe

http://download819.mediafire.com/m91mds94oghg/.../Plants contra Zombis 2.exe

http://download745.mediafire.com/6pxijpv450mg/.../Plants contra Zombis 2.exe

http://download1693.mediafire.com/m6rlab23eoeg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/770yefutgcjg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/hpk47mt9410g/.../Plants contra Zombis 2.exe

http://download1621.mediafire.com/lxn42et1zlyg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/8ix4b2jexxeg/.../Plants contra Zombis 2.exe

http://download1693.mediafire.com/ulj78z1zvqpg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/tfk343nmkxzg/.../Plants contra Zombis 2.exe

http://download1823.mediafire.com/d1fqdd30h3rg/.../Plants contra Zombis 2.exe

http://download1621.mediafire.com/0j3d8yvwiwcg/.../Plants contra Zombis 2.exe

http://download1825.mediafire.com/1b154o352cog/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/apa7bldbv4fg/.../Plants contra Zombis 2.exe

http://download748.mediafire.com/dlbeao5suwgg/.../Plants contra Zombis 2.exe

http://download2085.mediafire.com/1oobnzv5l3ng/.../Plants contra Zombis 2.exe

http://download1621.mediafire.com/n024s5i5eahg/.../Plants contra Zombis 2.exe

http://download2085.mediafire.com/ranbbb61b1cg/.../Plants contra Zombis 2.exe

http://download1748.mediafire.com/jehsfx9j6xjg/.../Plants contra Zombis 2.exe

http://download2151.mediafire.com/lw9jm2tdultg/.../Plants contra Zombis 2.exe

Latest 30 of 40 download URLs

Scan qwrbzkxza.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.