home

4685fa71-e8d5-e0d6-4b9a-4433f79c6f6e_1d1e78c88d2ff58

MD5:
d4a0b64948fe3fef67a0bad3d6cb8761

SHA-1:
b4c09057bf1c0c8d1ddf25ad794e2c17000b0e7b

SHA-256:
72c7df2cfd43ea94c0ffbdc59f36f64892aaddba41d468876970f53d78a8cd5b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 2:35:54 PM UTC  (today)

File size:
1.5 KB (1,520 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\4685fa71-e8d5-e0d6-4b9a-4433f79c6f6e_1d1e78c88d2ff58

The file 4685fa71-e8d5-e0d6-4b9a-4433f79c6f6e_1d1e78c88d2ff58 has been seen being distributed by the following URL.

http://mhccitrix.mclaren.org/Citrix/OAK/.../launch.ica?CTX_Application=Citrix.MPS.App.Oakland_Paragon.Operating Room Management&CTX_AppFriendlyNameURLENcoded=Operating Room Management&CTX_Token=28E7245BB5FE547BE8F06B3A10EB65C2&LaunchId=1469485446460

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.