home

73a66a70-8366-30a1-84f4-0cf9ed9367ce_1d1e2b2f449c844

MD5:
9128317c96afc63147f1c4a431a5085a

SHA-1:
1b1b1d8c3c0734ce087d9773625a363360ff56f3

SHA-256:
b801cf35a3d82ebe0c224881fc7202c67167eb00f899f8db71603cb814ed4c96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/16/2025 10:37:06 PM UTC  (today)

File size:
1.3 MB (1,322,832 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\73a66a70-8366-30a1-84f4-0cf9ed9367ce_1d1e2b2f449c844

The file 73a66a70-8366-30a1-84f4-0cf9ed9367ce_1d1e2b2f449c844 has been seen being distributed by the following URL.

https://webmail.ndu.edu.lb/owa/service.svc/.../GetFileAttachment?id=AAMkADcwZjdmODlhLWZkODktNDI1Ni05NmNjLTA2Yjc3NmI5ODQ2YgBGAAAAAABOWPJ4hM8cRKFJouphCkHbBwD8OSeGBn16S48xJu0lgukwAAAABWprAACbg 482u9jQ6os5Hry2lsCAAEPTFNoAAABEgAQABRScGXkJIZNnV7gpUgTwq4=&X-OWA-CANARY=XsA-MenHmUC2B7FcKc-b9J0z740AsNMI4cy84vKFX4OXxXuPbpeGPwnLJVCZda6YBfUktL95RAg.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.