home

446ccf39-39fa-8954-3639-2c6fbaab6319_1d1dc2a388d9d36

MD5:
7329177ac692e81699bbf3a8a4564179

SHA-1:
32a5817cd0c3b000f5d314c874a12232bee9b08c

SHA-256:
941eee925b3b11c9a92be09f4b79363efb95a50746da020286ee63cf9ba579f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/16/2025 9:00:23 PM UTC  (today)

File size:
33 KB (33,804 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\446ccf39-39fa-8954-3639-2c6fbaab6319_1d1dc2a388d9d36

The file 446ccf39-39fa-8954-3639-2c6fbaab6319_1d1dc2a388d9d36 has been seen being distributed by the following URL.

https://webmail.ul.edu.lb/owa/service.svc/.../GetFileAttachment?id=AAMkAGI2OGExOTNhLWRkYmQtNDk1ZS1iOTEyLTE5MmIwODEyYTI1MQBGAAAAAAAyamt8LlhER76MSmLGG17QBwCvMhBeZ0KdRryPOdWykvZfAAAAE2VMAACka1iOZligS5XgR7kk7BfIAAAP7EAgAAABEgAQADwnj0o86VlEsU0kZmqdkuE=&X-OWA-CANARY=i93xIpXQzUmJYijvOf5f3Vtt0e53qdMIzcJdUNkhYwtJqE6GxurjhVwaBv9Adf_7ZFXxATpQ5uw.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.