home

if

MD5:
4bc9241dd441cd076ceb72d9243b521d

SHA-1:
2b91436926a291145fa91c57e22ac905508d2dfa

SHA-256:
344fa2bd47a53d1b8b48e464ad2afb1b7f6a75da2b407ebe3402e6e8a8d6e6da

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/24/2025 8:58:10 PM UTC  (today)

File size:
3.5 KB (3,583 bytes)

Common path:
C:\users\{user}\downloads\if

The file if has been seen being distributed by the following URL.

http://nym1-ib.adnxs.com/if?e=wqT_3QLeBfDQ3gIAAAMA1gAFAQj2uu-4BRCNnq7j7eXzwikY5PHu65_aqJQNIAEqLQmq1_-d6T7NPxGr1_-d6T7NPxkfhetRuB4hQCFq_dipy6_sPylq_dipy6_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_EOADAOgDAPgDAYAEAJIEBC90dGqYBACiBA02Ny4yMDQuMjM3LjMyqAQAsgQICAAQABgAIAC4BADABLi9a8gEANIEDDEwLjMuMTI4LjE3Nw..&s=d76ed636bf78f509dfb2706ec86a462ee88

Scan if - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.