home

{521f5509-de16-422d-b78f-560ca3aacd4b}-wondershare_video_converter_keygen_by_f4cg.zip

The file {521f5509-de16-422d-b78f-560ca3aacd4b}-wondershare_video_converter_keygen_by_f4cg.zip has been detected as malware by 34 anti-virus scanners. The file has been seen being downloaded from rp.t9e.net.
MD5:
f3cd9a6d63d58a04371ea487479111a1

SHA-1:
e64b9e9b0aebd0cd2ee6aeb7dbdf2815801711b9

SHA-256:
63e1b437ec743d0d382db2455b659f4952896f87ac47ff76c65bce2464761257

Scanner detections:
34 / 68

Status:
Malware

Analysis date:
2/25/2025 10:21:55 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Zusy.110931
5676081

Agnitum Outpost
Trojan.CoinMiner
7.1.1

Avira AntiVirus
TR/Agent.3216344
3.6.1.96

avast!
Win32:Agent-AUKS [Trj]
2014.9-150414

AVG
CoinMiner
2016.0.3140

Baidu Antivirus
Trojan.Win32.Miner
4.0.3.15414

Bitdefender
Gen:Variant.Zusy.110931
1.0.20.520

Comodo Security
UnclassifiedMalware
21759

Dr.Web
infected with Trojan.Starter.4243
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Zusy.110931
9.0.0.4799

ESET NOD32
Win32/CoinMiner.VR.gen trojan
7.0.302.0

Fortinet FortiGate
W32/Agent.WHI!tr
4/14/2015

F-Prot
W32/Zbot.QB.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Zusy.110931
11.2015-14-04_3

G Data
Gen:Variant.Zusy.110931
15.4.25

IKARUS anti.virus
Trojan.Win32.CoinMiner
t3scan.1.8.9.0

K7 AntiVirus
Trojan
13.202.15582

Kaspersky
Trojan.Win32.Miner
15.0.0.543

Malwarebytes
Trojan.Agent
v2015.04.14.06

McAfee
Artemis!F45272DA17FA
5600.6796

Microsoft Security Essentials
Threat.Undefined
1.195.2378.0

MicroWorld eScan
Gen:Variant.Zusy.110931
16.0.0.312

NANO AntiVirus
Trojan.Win32.CoinMiner.dpxaxd
0.30.16.1110

Norman
Gen:Variant.Zusy.110931
03.12.2014 13:20:04

Panda Antivirus
Trj/Agent.JJW
15.04.14.06

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Quick Heal
Trojan.Miner.g4
4.15.14.00

Rising Antivirus
PE:Trojan.Win32.Generic.1853EA98!408152728
23.00.65.15412

Sophos
Mal/Generic-S
4.98

Total Defense
Win32/Tnega.LEeQVQ
37.0.11547

Trend Micro House Call
BKDR_SH.CE09E5B1
7.2.104

Trend Micro
BKDR_SH.CE09E5B1
10.465.14

VIPRE Antivirus
Trojan.Win32.Generic
39328

ViRobot
Trojan.Win32.A.Miner.3216344[h]
2014.3.20.0

File size:
3 MB (3,128,633 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\localcopy\{521f5509-de16-422d-b78f-560ca3aacd4b}-wondershare_video_converter_keygen_by_f4cg.zip

The file {521f5509-de16-422d-b78f-560ca3aacd4b}-wondershare_video_converter_keygen_by_f4cg.zip has been seen being distributed by the following URL.

http://rp.t9e.net/.../download.php?p=bmFtZT1Xb25kZXJzaGFyZStWaWRlbytDb252ZXJ0ZXIrUGxhdGludW0rNS4xLjEmaWQ9YmVkZGI5ZWFkYSZ0eXBlPWtleWdlbiZjbnQ9MiZzdz0xMzY2JnNoPTc2OCZzZD0yNCZzb3VyY2U9d3d3LmNyYWNraGVhcC5jb20mZGMxPTVkNDk4YTZmOGZjN2U3M2ZhNGI1ZGU0YzU5OThjNDQ4JmRjMj1lZmI1NTJmODNhNDg5N2NiN2JlNDUxMzliNzAxZTU0NQ==&h=f2e1c0c63d408e6886b1e84d25189b87

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.