When this alert lands on a dashboard, the triage process must move beyond a simple "delete and ignore." The "new" aspect of the file is a critical forensic artifact.
When encountering zclient.exe as an unknown new file, a disciplined response is critical. zclient unknown exe file new