home

0166f6bc-ced1-1c23-0b62-4bed64c86ed4_1d1b691db08ddae

The file 0166f6bc-ced1-1c23-0b62-4bed64c86ed4_1d1b691db08ddae has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from cdnfiles.4shared.com and multiple other hosts.
MD5:
49c409b3691130ef708b54daf0460d6e

SHA-1:
c86ffea4b5ef146a2b0f38cbe8e251b6309e9edb

SHA-256:
06be6644a04426ecbb03223cbb0503851e56582a157c5b42bf08e28be69a85c7

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/26/2024 9:43:26 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.6.18

File size:
4.3 MB (4,522,289 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\0166f6bc-ced1-1c23-0b62-4bed64c86ed4_1d1b691db08ddae

The file 0166f6bc-ced1-1c23-0b62-4bed64c86ed4_1d1b691db08ddae has been seen being distributed by the following 3 URLs.

http://cdnfiles.4shared.com/web/cdn/popular/download/JF8lkIGgba?contDisp=attachment; filename="101 - CORACAO MACHUCADO - THIAGODOWNLOADS.mp3"; filename*=utf-8''101 - CORACAO MACHUCADO - THIAGODOWNLOADS.mp3&contType=audio/.../

http://dc544.4shared.com/download/.../101_-_CORACAO_MACHUCADO_-_THIA.mp3?tsid=20160416-195614-c5607017&sbsr=e5b34e52a6a7492d0c68ee034bedc29596f&lgfp=2000

http://cdnfiles.4shared.com/web/cdn/popular/download/JF8lkIGgba?contDisp=attachment; filename="101 - CORACAO MACHUCADO - THIAGODOWNLOADS.mp3"; filename*=utf-8''101 - CORACAO MACHUCADO - THIAGODOWNLOADS.mp3&contType=audio/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.