home

zion.exe

MD5:
b6f52027f6a7c96ddd578a7450e7199a

SHA-1:
38750f354621e9a2aeb07877d7d9226b9c3a5779

SHA-256:
a594e3d87a6b441387431bc5f22a43ca12ceb22289a104c1072d0c874cbe0d20

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 12:58:41 PM UTC  (today)

File size:
103 KB (105,472 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\zion.exe

File PE Metadata
Compilation timestamp:
8/6/2015 6:29:14 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
1536:CYGXggCzCPxZoGR8RWQJKcC2zYpBbory:C3XggECPxZoGR8pJKAYpBbory

Entry address:
0x11438

Entry point:
E9, 43, D9, 00, 00, E9, 6A, C4, 00, 00, E9, 49, 61, 00, 00, E9, 24, 7D, 00, 00, E9, 2F, 5E, 00, 00, E9, 4A, B8, 00, 00, E9, E5, EE, 00, 00, E9, 30, 38, 00, 00, E9, 9B, 77, 00, 00, E9, 18, C4, 00, 00, E9, 19, C4, 00, 00, E9, 2C, 99, 00, 00, E9, A7, 60, 00, 00, E9, 32, E9, 00, 00, E9, AD, E9, 00, 00, E9, 54, EF, 00, 00, E9, A3, 29, 00, 00, E9, DE, 4F, 00, 00, E9, 89, A6, 00, 00, E9, 64, 61, 00, 00, E9, 6F, 4F, 00, 00, E9, F2, D8, 00, 00, E9, A5, 16, 00, 00, E9, 32, EF, 00, 00, E9, 9B, C7, 00, 00, E9, B6, B5...
 
[+]

Entropy:
4.8286

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
76 KB (77,824 bytes)

The file zion.exe has been seen being distributed by the following URL.

http://web.cs.ucla.edu/classes/summer15/cs31/Projects/.../zion.exe

Scan zion.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.