home

if

The file if has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from nym1.ib.adnxs.com.
MD5:
da61d3283e9488371bd3905b0ae8033b

SHA-1:
78a45204c22fde65ba40d9b4dca0324dcc67fb53

SHA-256:
ae3d8998165598586fbcbfb36adb7e406ef21c20e5398415197f65b1663ec7b2

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/25/2024 8:54:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.5.12

File size:
29.5 KB (30,162 bytes)

Common path:
C:\users\{user}\downloads\if

The file if has been seen being distributed by the following URL.

http://nym1.ib.adnxs.com/if?e=wqT_3QKhBPBCGAIAAAIA1gAFCOSs4q4FEMzLs-6voYWFZxiei6eAhODAo14gASotCTE9HwfL6a4_EbP_EIPla6g_GQwCK4cW2eY_IRESBCkwDSSwMO3oygI4yANAixZIAlCq9ZYQWLKXL2AAaJ-aAnAAeL3JAoABAYoBA1VTRJIBAQbwUJgBrAKgAfoBqAEAsAEAuAECwAEFyAEA0AEA2AEA4AEA8AEAigJYdWYoJ2EnLCA0MjU0ODUsIDE0NDAyNTc2MzYpO3VmKCdjJywgMTAxNTM0N0oeADByJywgMzM5Mjk4OTgsMjwA8GCSAp0BIXRDUlJ5d2lEM09zRUVLcjFsaEFZQUNDeWx5OHdBRGdBUUFCSWl4WlE3ZWpLQWxnQVlINW9BSEFBZUFDQUFXcUlBUUNRQVFHWUFRR2dBUUdvQVFPd0FRQzVBUUFBBQLIQkJBd1FFd1BSOEh5LW11UDhrQndIN0trb2RIMVRfWkFVN1JrVnotajFCQTRBSGxuZzcxDTwoLpoCHSFYQWFvUEE2oADwZHNwY3ZJQUEu2AIN4ALogijqAhhodHRwOi8vbXlzbWFydHByaWNlLmNvbS-AAwCIAwGQAwCYAwCgAwGqAwCwAwC4AwDAA6wCyAMA2APorTHgAwDoAwDwAwD4AwGABACSBAQvdHRq&s=9f2cb5eb7f717259da65de5c3b14b4982746448e&dlo=1&referrer=http://.../

Remove if - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.