home

1a064ac1-519f-3015-d6ad-1d2e7c5ac31c_1d1d191345db4d0

MD5:
b97079dc4e69d6fce87b80c2ab8a9e63

SHA-1:
5856794dcca18148c7abbe93889f6e942cdd33bd

SHA-256:
4dceb3e246dd4da69fc265d84b7e514096ca96426c12bbc4726736027f414069

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:31:48 PM UTC  (today)

File size:
5.6 MB (5,916,253 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\1a064ac1-519f-3015-d6ad-1d2e7c5ac31c_1d1d191345db4d0

The file 1a064ac1-519f-3015-d6ad-1d2e7c5ac31c_1d1d191345db4d0 has been seen being distributed by the following URL.

https://owa.glovis.mx/owa/service.svc/.../GetFileAttachment?id=AAMkADA0MmIwZDQ4LWNmODEtNDE1MC1hOGU1LWQ3ODRkMGM0ZmJmNgBGAAAAAACri7kp4pnSRY3s8WYzY9zCBwCw7 1BuHsLTqK043GEBNCqAAAAAAENAACw7 1BuHsLTqK043GEBNCqAABCdn1OAAABEgAQADJED2vrom9NkaDw87nIOao=&X-OWA-CANARY=taZAHCoeeU2qGeUelDuYEZwiFgrfntMIXZBdaKsWpNEYtVxggSNG2_f2Ph9pA_t09kNI4jOO6eA.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.