home

38f68e1a-0085-0f80-a11d-df011e198c7a_1d1e50696759f9c

MD5:
1f4b256834c28698147ca590920aba90

SHA-1:
4820c38d97b7c14cda52c9f2b8ad7013bf61cbfe

SHA-256:
2e21d1c1948337e213cea621a4f1421345b385af1d662eeef8e2d367415a90f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 10:15:06 AM UTC  (today)

File size:
1.5 KB (1,493 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\38f68e1a-0085-0f80-a11d-df011e198c7a_1d1e50696759f9c

The file 38f68e1a-0085-0f80-a11d-df011e198c7a_1d1e50696759f9c has been seen being distributed by the following URL.

https://uhspa.cernerworks.com/Citrix/P152WSSOWeb/Resources/.../VUhTUEEuUG93ZXJjaGFydCBQMTUyVyBPZmZzaXRl.ica?CsrfToken=332E2C42F30311B81ECD373FA3A32D8F&IsUsingHttps=Yes&launchId=1469208059256

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.