home

310db979-6a3c-18a8-a00d-68c95cc9aad8_1d1ccf3e1743fba

MD5:
991889e81dd52344fb2eb5ec64cf850c

SHA-1:
0f5ee4c1bf2233b02ca15c8be369247cf652b2b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:12:11 PM UTC  (today)

File size:
1.5 KB (1,531 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\310db979-6a3c-18a8-a00d-68c95cc9aad8_1d1ccf3e1743fba

The file 310db979-6a3c-18a8-a00d-68c95cc9aad8_1d1ccf3e1743fba has been seen being distributed by the following URL.

http://gisne3.pea.co.th/Citrix/XenApp/.../launch.ica?CTX_Application=Citrix.MPS.App.peane3Farm.???,???,???CTX02&CTX_AppFriendlyNameURLENcoded=???,???,???CTX02&CTX_Token=0D4249F8628C3C4E7BAB5C2EEC0E2B31&LaunchId=1466561191161

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.