home

dvdshrink32setup_downloader-q9msujane.exe.zip

The file dvdshrink32setup_downloader-q9msujane.exe.zip has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from sub.yorkshatb.com.
MD5:
f6fe2e8454e5223ae1c9fdebc2483ed7

SHA-1:
60e5f3d4036aa6f6e2b7c9271cbdff5d5f9d77a1

SHA-256:
a7a5d64cf9ed17b98044f0a80c6b3c19a17476cba40dbe8d494b2e6e5d49e4a0

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/25/2024 11:09:51 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.5.21

File size:
379.5 KB (388,567 bytes)

Common path:
C:\users\{user}\downloads\dvdshrink32setup_downloader-q9msujane.exe.zip

The file dvdshrink32setup_downloader-q9msujane.exe.zip has been seen being distributed by the following URL.

http://sub.yorkshatb.com/Q9MsUjAnEbadba21fb74d423d19e8779054880a035uJKByqoxrZYToyOntzOjI6InRzIjtpOjE0NDY4MDIzMTk7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQ0NjgwMDQ3NTE4NC5leGUiO30=

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.