home

1b19e481-ced3-6350-d581-522ed8949ed3_1d1b7c56638343a

The file 1b19e481-ced3-6350-d581-522ed8949ed3_1d1b7c56638343a has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from cdnfiles.4shared.com and multiple other hosts.
MD5:
bba2e975a95cd152ab336904d495dde9

SHA-1:
9dfd1e29b3013f75bc9968b1c199ac9f38061de6

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/29/2024 11:02:05 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.6.18

File size:
3.5 MB (3,645,857 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\1b19e481-ced3-6350-d581-522ed8949ed3_1d1b7c56638343a

The file 1b19e481-ced3-6350-d581-522ed8949ed3_1d1b7c56638343a has been seen being distributed by the following 5 URLs.

http://cdnfiles.4shared.com/web/cdn/popular/download/dgpEu5-A?contDisp=attachment; filename="Viva la vida - Cold Play.mp3"; filename*=utf-8''Viva la vida - Cold Play.mp3&contType=audio/.../

http://cdnfiles.4shared.com/web/cdn/popular/download/dgpEu5-A?contDisp=attachment; filename="Viva la vida - Cold Play.mp3"; filename*=utf-8''Viva la vida - Cold Play.mp3&contType=audio/.../

http://cdnfiles.4shared.com/web/cdn/popular/download/dgpEu5-A?contDisp=attachment; filename="Viva la vida - Cold Play.mp3"; filename*=utf-8''Viva la vida - Cold Play.mp3&contType=audio/.../

http://dc424.4shared.com/download/.../Viva_la_vida_-_Cold_Play.mp3?tsid=20160331-072615-57b81f59&sbsr=415bd6c88078b2e737edd1aeb6eabc4b96d&lgfp=2000

http://cdnfiles.4shared.com/web/cdn/popular/download/dgpEu5-A?contDisp=attachment; filename="Viva la vida - Cold Play.mp3"; filename*=utf-8''Viva la vida - Cold Play.mp3&contType=audio/.../

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.