home

36db7f49-ef0b-4296-d843-10c062761bf4_1d1cc9a9942240e

MD5:
df077e9fa28efbbd49ee595a008b0e96

SHA-1:
0f428a990068009b49d367552b196f5cce64dc9f

SHA-256:
96edeeee692ed5b9ce2239c82470204f813f692183ce50ff21db7553498ad340

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:32:18 AM UTC  (today)

File size:
1.6 KB (1,616 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\36db7f49-ef0b-4296-d843-10c062761bf4_1d1cc9a9942240e

The file 36db7f49-ef0b-4296-d843-10c062761bf4_1d1cc9a9942240e has been seen being distributed by the following URL.

https://gateway.consolidatedhealth.ca/Citrix/CAGTSSO/.../launch.ica?CTX_Application=Citrix.MPS.App.XenAppFarm.!Meditech`&CTX_AppFriendlyNameURLENcoded=!Meditech`&CTX_Token=63C848C72CFB2751B7546BACE2968891&LaunchId=1466522845702

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.