home

z3x-shell.exe

z3x shell

z3x-team

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from z3x-team.com.
Publisher:
z3x-team

Product:
z3x shell

Description:
z3x shell Setup

MD5:
57ddd87206327b385c2da1f0b9f25bfb

SHA-1:
059b14deabc88ab5d43f0997abfb55caaf34f720

SHA-256:
4cf3aff0a03181c9e1df329d3ab61e7567137f453d27962bf7310153618f4137

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 4:07:27 AM UTC  (today)

File size:
12.4 MB (13,046,999 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\z3x-shell.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:9ZWoYCZM486jRamWdPOzc1ijhBjQJ8cau3pOQJ9xMezjJp7dePwsd3I3TMVSaBit:fMWRwPv8jHU+7mrRzjJBVYATMUA3xde/

Entry address:
0x9A58

Entry point:
85, C3, F7, C7, A1, A9, 95, 1C, 0F, BF, F7, F2, 0F, BF, EF, 32, EC, 85, DA, 69, C9, F4, 9F, 4E, 75, 87, F5, F2, 88, F6, 39, EE, 68, BA, 42, 00, 00, 8D, 2D, 64, EE, A9, 7B, 59, C7, C7, 9A, C3, D5, 12, 86, F7, 81, F1, 8B, 09, 00, 00, FF, CB, 85, FB, 03, C1, C6, C2, A6, 8B, DB, B6, 97, 2D, 12, 09, 00, 00, 8A, CA, 0F, AF, D8, 2B, CB, 0F, AF, D3, 31, F9, 4F, 8D, 35, D7, B5, F0, 38, F3, E8, 24, 00, 00, 00, 3B, CF, 75, 07, 69, C0, 3E, D2, E7, D2, 45, 1D, 7E, ED, E9, 57, 69, C1, B7, D8, E5, CA, 0F, AF, CD, 8D, 15...
 
[+]

Code size:
36.5 KB (37,376 bytes)

The file z3x-shell.exe has been seen being distributed by the following URL.

http://z3x-team.com/.../z3x-shell.exe

Scan z3x-shell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.