home

if

MD5:
a4c5e1220349f2abeaf970e30705701a

SHA-1:
f332edf56a5c73df098f9abf8f1197f150481513

SHA-256:
ff7e234b244ca418ab1f10a6ccbc12fdbc25be069d68d46852356c0f9f04dab3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/24/2025 3:50:48 PM UTC  (today)

File size:
4 KB (4,062 bytes)

Common path:
C:\users\{user}\downloads\if

The file if has been seen being distributed by the following URL.

http://lax1-ib.adnxs.com/if?e=wqT_3QK9BfBMvQIAAAMA1gAFAQjL9oO5BRCI77yEqvTMxS8YjZ7_p5ilmot2IAEqLQn6gr6gL-jrPxEAAAAAAADoPxkzMzMzM7MvQCH2KFyPwvX-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-AC8Psi6gITaHR0cDovL3d3dy5tc24uY29tL4ADAIgDAZADAJgDAKADAaoDALADALgDAMADrALIAwDYA5T_EOADAOgDAPgDAYAEAJIEBC90dGqYBACiBAw3Ni44OS4xMTEuMzaoBPnAArIECAgAEAAYACAAuAQAwATF1bMIyAQA0gQLMTAuMC44MC4yMjM.&s=0577f887b18bf0245100264878bb9ad578666aba&referrer=http://.../

Scan if - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.