Zusy.534939 (file analysis)

The Zusy.534939 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.534939 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid

How to determine Zusy.534939?


File Info:
name: A557F8B300E9BFDE569D.mlw
path: /opt/CAPEv2/storage/binaries/b360b6a7dd924532957e17e811197d55ae5093301d394935aac9714a17dd84af
crc32: 186F6424
md5: a557f8b300e9bfde569da414d1ac3a49
sha1: bd3ddeb1876d3cf85869abadb00ac03e6e191e02
sha256: b360b6a7dd924532957e17e811197d55ae5093301d394935aac9714a17dd84af
sha512: f807ac4f74e41365347f8111f6607418f1b12fa1c95ad84e9a0b4c64e17f72d775b66cca44160b3e15edc6e2d1cf46f8a355e50ade9a4b71474c21fe58eaf6f9
ssdeep: 6144:leUQWZyEzfuSjMauuthzjTraeI8eanpIcIzk8gJP0:UU0EfmeI8PWxw88P0
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T192746C8E5BE88E35D27F47BB58750A0D8A31F955EC96FB0D34C8809898AF308C566737
sha3_384: 233f6938d6b91d86dbe4daa0d37ad19c1d873daf2838f1324ccbd8ad525896207b9c6baf3c21914a467945538eb25be0
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-29 14:53:40

Version Info:
Translation: 0x0000 0x04b0
Comments: FBX Utils Assembly
CompanyName: Blueberry Software Ltd.
FileDescription: FBX Utils Assembly
FileVersion: 3.19.0.2291
InternalName: BBUtils.dll
LegalCopyright: Blueberry Software Ltd. (c) 2023
LegalTrademarks: 
OriginalFilename: BBUtils.dll
ProductName: FBX Game Recorder
ProductVersion: 3.19.0.2291
Assembly Version: 3.19.0.2291

Zusy.534939 also known as:

Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Zusy.534939
Skyhigh	Artemis
ALYac	Gen:Variant.Zusy.534939
Alibaba	Trojan:MSIL/Disdroth.ed2449a0
ESET-NOD32	a variant of MSIL/Disdroth.AQ
BitDefender	Gen:Variant.Zusy.534939
MicroWorld-eScan	Gen:Variant.Zusy.534939
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Zusy.534939 (B)
F-Secure	Trojan.TR/Redcap.nddbu
VIPRE	Gen:Variant.Zusy.534939
GData	Gen:Variant.Zusy.534939
Google	Detected
Avira	TR/Redcap.nddbu
Arcabit	Trojan.Zusy.D8299B
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!A557F8B300E9
MAX	malware (ai score=81)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09AT24
Ikarus	Trojan.MSIL.Disdroth
Fortinet	MSIL/Disdroth.AQ!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Zusy.534939?

Zusy.534939 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X