home

wppr32z.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
ba96054f1bda0c12c80f5a497c5eb85e

SHA-1:
5475e3605d3d543c1b9a3e2a63a0781f5c79c776

SHA-256:
7b4a232b2ad1be6362636ecd09960bcf55bc20dcff8610e78f8645af57c677ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 1:21:59 PM UTC  (today)

File size:
850.9 KB (871,305 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wppr32z.exe

File PE Metadata
Compilation timestamp:
4/11/2007 11:36:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:mm2T7aTWKXHpleyyLfuHbLGHdgmex6nYWw/GSBTvYADqPac2hupMZA1z:X2T7aThPlHb815kTvYLa0EA1z

Entry address:
0x6360

Entry point:
E8, 11, 23, 00, 00, E9, 16, FE, FF, FF, 2D, A4, 03, 00, 00, 74, 22, 83, E8, 04, 74, 17, 83, E8, 0D, 74, 0C, 48, 74, 03, 33, C0, C3, B8, 04, 04, 00, 00, C3, B8, 12, 04, 00, 00, C3, B8, 04, 08, 00, 00, C3, B8, 11, 04, 00, 00, C3, 53, 55, 56, 57, BD, 01, 01, 00, 00, 8B, F0, 55, 33, FF, 8D, 5E, 1C, 57, 53, E8, 06, AE, FF, FF, 89, 7E, 04, 89, 7E, 08, 89, 7E, 0C, 33, C0, 8D, 7E, 10, AB, AB, AB, B8, A8, F1, 40, 00, 83, C4, 0C, 2B, C6, 8A, 0C, 18, 88, 0B, 43, 4D, 75, F7, 8D, 8E, 1D, 01, 00, 00, BE, 00, 01, 00, 00...
 
[+]

Code size:
44 KB (45,056 bytes)

The file wppr32z.exe has been seen being distributed by the following 20 URLs.

http://www.ranchsendgift.com/GJoacV9bF5MaXUWUXOVX1D0Cd 7AijnK4ulaw7_rodP8nB_EGKqhF84Qh4T0Rt5EjRczOLVGTFl_XR9_t2VOcbOkRI_O9QVzJGPHblL_wCTv G49X9h6SSKTLlBRuRUPoDqCkV8cn15RLhOXXqZzZsY2Y1AfqZ9MEnx9T wKbz66crw4JAtkEH42MUcLydeV7yCaDmi8cVRzSR8HHNc9tdLK8ZCwZA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.towerbitscenter.com/3HmrmTPljRy4s0G_1Harh3LWZQEeMzp0k5z_U5n26jAjc8ofWj0S9x02FkVTjqwQASNmqMXxgn0KsvMwFcLvyLzJFg2HjKAChb_I4YUtYYPtjkmPsZHVxJWGA8Pp1aNiGPttfeQ1hQQAv4gDprBBwV4P45C3mRLzbKO_HQLo00tA155Sb5sZaHBApzH1KiskTUDHl KUYJ tyi6BdQZMWGr7UKAOg==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.ranchsendgift.com/R5X8PQfwZEjMZ3Ysv40FP4B0hjzU3QEin34aDN9LTYeTibgh3ucyykAZf7dsSvoBhUZ9F52e_Msw_aJ2ktJ2fH EYMxCFABvnfrZK4eLlsBP23NTAzw5RIZljArdaA9K9qPZJ1bvdcIuOv_gHeLUKX_mDc6RFYHnCL5Pm1pEY5SXzs002LhpKvB7DlISBYByQNV o90pNt5qSeDlWfhluzlJNbJJbg==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.towerbitscenter.com/1USSJ_VFm7NaS5AH4lReqQSkRpRlaB NogX4oVn zUoBC Kp_qVp0xemaCU571wdexxu9 9SFK7uwtDQya_ybHYIzhvJnyKV8ruSCmhg8EbI9MgdKTBySTPA_nevzTnELuHNtWA7SnaZjc3uuiVOXwiU9XLsXw EC7_u1E4XXrGJlgpEDdcxRlH9YeO27c R0BlojlnsgW3aCk0L2NF V3JAAp1aIQ==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

https://onedrive.live.com/download.aspx?cid=FF0C13F9F1A94F54&resid=FF0C13F9F1A94F54!3850&ithint=.exe

http://www.ranchsendgift.com/XbgpLn3bILBiLwCX0AOiZ76BZjRCMmeJExchZYHsqJx_zlVxrklIjykwShfWGO36cdnRp8n9RalV5cDgpMS1_TPZt6UoDvMCvFVPsLGxN_Kl66F08x0 S08AU C32d5dOSq0w4AIc7E9p69jLu5fwp2UyE_V iFxsd gj51Tdd7X_RocyTs47aMBmUE6_bHDIhH9XHptqpaYZWuNFFqUwiJKb2nNPg==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://d.baixakifiles2.com/?ic_user_id=254&data=rxxCu2A1apjWtbM9PvZ5c9LVQS2ySXy4/t1wSp2Uarpr1g7RY17T2BVAGYsi2KaANFubbTHgRzs/YU563tBjsJ3Tq6dQgzw85 0ey Bt5ZxxU5LmfBrMvBrOyFMNgugZHoyXTDfIn/TuRgMFZJyAmCfkyFtzNUST8ZdLsZTQnerVtbj2IuvXwcgqCiXWGyTiWbwNIwnNzwCSgAZoiuO 6IH V/M/UPcZmonAbKuqgk4fvRpYzJWHEkJapgz8x8PSnZaSOqmSNIl Bz4JQPn1KwijOXWOElo/tWWNsNYNtqwf7/aoY74/I5Q9/XzCTGu3wAXanTx3XfJ5H6Z7MYG/q/5hCogdf9yZU642L2Sbhic5iKe3C5FSozO7R6oziDFs2VLKCM7nUiCz/L0soOXZDYa0heQQ50AfU/XygOojukcH1IGZdmneTheCyAkLXjpBXiRzknmnmMonr2cKKm0pt7p7o4sblVthXaMbyNKlBqJKz73xZeFb35Bu1 clXGWDMj9Kvwxuy NrXA1LG0IP8vw3iUmHtl/nAMdIrNybFLl9nVXjEpuepsXgtP8L5lCXfdM1/AnOgpd5tOtdoKjhi2ADGP/Sg0S9lWgftYLwlMXiE63jsPpi8X tABvoyl86LQez62k3lJnLk7FAQldOHgkQoDKiThL4SDbBYnWrUG3An1mJccrlYrTmRLQPSjSN2ilcTcbVS lM09Xo/hz01XA2aktt6Ro=&key=LH ILLzHrtq d8rX4YL 1ipjpMLvYvSdJNVMn5eWr0RNPfehZRe14IyQRljaVb15bJDoGiRLW811fXDkSMPuBiRXCUcFIHqpMx4U7ZF8SuETrkdWYJLS27cqdVUv I4jbLpywkzjhJVDzh0tqMVdD/.../9HUbM9cj

https://onedrive.live.com/download.aspx?cid=FF0C13F9F1A94F54&authKey=!AJKuUnDuMFC21ME&resid=FF0C13F9F1A94F54!3850&canary=e51k dXTxTQ5HK07Eh 4wfSc1aTb4jWVwxtGtBd6SeA=9&ithint=.exe

http://www.ranchsendgift.com/sTP9dEEqfSsjUWtyjgRzzxTqzaXV3p5ZWh2ouRtoy_iDHYAsNVV2FLdSpLjTa1pkjX8KHXAP66ftnawLvYVhNa2jUUpIDxEPHIaY04DO9phqj4FBWNmqM0lzBjqThqQXwMAD8giqHkswOhUa6SNodmRwgtnJvDVCOzzG_CA1g5AyyWQP8TRdKFC1nzbW75yyr_IFFJI17Ydxl3YBmCS2uHRV__jUBw==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.ranchsendgift.com/toa8U4VSp2Mj1mAuUBJO4zWzFF9wDdV_3lkBJo47dcFvYBXcxzv NTCPLcWQNwYvY4pbquCVSM5dhQ3oM0pN_XCyyDUk7LPg5Syii6v QJKFMwyc1Hop93DkTBRTr7NdinN160tL8b_aA6An8Sepc5nZ22QD8PSgloDnj6QC2pkbYIWVD7 JAGuPu6Q7JXgk5bnbEHtkYgYLqOgXju1v_0NVTQAu4Q==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.towerbitscenter.com/fpNCxby3R3Xzan9WOWP12hjz2DwfSxqjsKJuoTroZzhGcpdLHeh_dGCEtYm4Mvy6ruuGjFkKjzDnSIyAd1gNvcfkrPQ0HcvhE24MQH iqlv5SJq1Q90B0gw PZSK2x6CbF0rCXsnTjrEAtFK_c3Sq0FI4hlLmjpdwNqRgu5MvBzyR5SaRb3ZxkZLCnjGDycO8LQpAIyGwUZyXfJdt6fPHMeHLt8nSA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.ranchsendgift.com/FFAy6MZlws qjRoO2_2B529YcqNWXM7puybLJY_OrdhlDMszrqPuY uXsE0adR0u8rwN1mh9PDFOcU_5syteAQ KIg1qhA8Y8MmtSZu1k09d6FxsN72cfGwXsMBXPPIJPu2bN65eWIxLostZseX zXyeFOP3m1pA3IghStupq2e8V3hO68DPYay baCV85GlheRSdDA1kZlDvtYKFVQPOCdjd1YnPA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.ranchsendgift.com/uXdR4Ag8qdwWNYWW1yhHGmGInSCc pgh4nCIdkDsVZgZqeeo wMv1WBUQGdYxromnegSjOJLignRnCnbcdsas1Pdp_ZguJHl2mutaAlmgMTLVjXOhBrsd3eulhfAm0TAk_qU44DeWoIg5uvb7ro7M9O ipuNVicL0hydjqdAKEiMoq9ueVYk754w6DzE7OhPvvVxvIzxbtIapXO1NuN8JLJArVf1UA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

https://onedrive.live.com/download.aspx?cid=FF0C13F9F1A94F54&authKey=!AJKuUnDuMFC21ME&resid=FF0C13F9F1A94F54!3850&ithint=.exe

http://www.ranchsendgift.com/6aCtSxP_jc8Te4r29Hdr2ryKI2ZgeH_FoMPQkCvrYWaJi3bGiNdd1D4Xj15aTWEgamufuxoCOXjaojD7tbxxvi3fFsT0SDk5BsJkemTi7mkD9E6kJz42eZh_ycjfQLuaBRXxUUIlQ1psQXTz0TSm0BjRJfBdKkei3gbrgVI0mrqJMSstHJYrj7Zfl9S98X8GIQYvJh6lCJowKzT2kG5f3PBblWL2oA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://www.ranchsendgift.com/PG585A9mX6QqixVn7kOo HbFZBjla3u4xhAPqxIx9k9bz GZiS 6QhSzi0pzUHAePlqheBxv8jwyXQkVr4gL5qUMxcrHFW1vs8rCvH0vKkB4cFvzz7xXcaUDaw85wPoni2B3jxZfRw0YquM N4NQ10qPUn64ygfak1 112g _CbwZ0k7I2JQs8xm8qyyC7wN736_esLbEkOn3Z3a5RmOl5_BfCreJt8WYxOzc6V5 x70KGNe62Qi1CkoCyqL4hatMhTZb0bSq3f4brDAtEgyQ_RstBR1Koub0mYzoC5oXu1pPoXr1 lNwpYZ0Ba5lTO5cTTABU3GdJGAuTt14PmjKnAuNAciEe42_OGlx6FujDk2A8MZfnfgqyLUra1t7l8_oJiHfbR0rab5KbP4dK6JINLVXy20x8E7zk_eJl4rvq3Q7iozwp6yxaey0rSB_Mft9ugNCTMsVzgbOwY3xFRbIK23Xi9Z_uOiGxqejXUUl8DmD6fPoW5PimlisVD_03HmqANhZYSX6xgUXWVFzia55uHFjOTEO5aeWjnYoEom41z_fTyDkkYR cJFmk2QNVfBGLXp3VhAKOKhDrdBey0TQisxXsHrFA==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B-e

http://www.ranchsendgift.com/cQj3UACvSwAyYYDn0hGoPn KiAVKRJckyfwsiaP2Bx3ATRJjXSwupei2 0miHiVCOOjoEWhF7Fpppsl0ya3sRoc0okscJXqOsaPEIukYxf0IcktF336zMy1XQT E72RShdJQ40MgJYZBlxwJG _OBIIZ1A2iNsl1Zt61WQ377Sumllk5wWqshQxMUUrUUKup3 kzSyFNyDmkAh52km0NGv5yXns63g==-GzAAAETdFtsPGtPBgQZlzItiFSJSWaCN04zshoeEDO24GNLYTsQ66ZdULV8B

http://ultradownloads.com.br/.../2,203539.html

http://www.techtudo.com.br/_/software/.../download

http://math.exeter.edu/rparris/.../wppr32z.exe

Scan wppr32z.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.