home

836b7348-ac6a-af4c-ec8f-d1c0100e54a8_1d1cfa8a2677baa

MD5:
c508b6c237b3f949ff9a15b499eddc0f

SHA-1:
dc67f65261246952bfbde4ea1ffc0fa58cfa8851

SHA-256:
b82aa0f8151fc1b2a9f4c274cea26d30ccc010f6689846fa56124454c4525c24

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:44:20 AM UTC  (today)

File size:
14.4 KB (14,721 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\836b7348-ac6a-af4c-ec8f-d1c0100e54a8_1d1cfa8a2677baa

The file 836b7348-ac6a-af4c-ec8f-d1c0100e54a8_1d1cfa8a2677baa has been seen being distributed by the following URL.

https://mex06.emailsrvr.com/owa/service.svc/s/GetFileAttachment?id=AAMkADE2MjRiNGMwLTJmMDUtNDZhYS05MDI3LTc4NzBhZjZhNTNhMgBGAAAAAABOX6v PKBvQqSZXs9JFYzpBwCEAnSdj9M4TpR/.../SPIAAAAAAEMAACEAnSdj9M4TpR/.../SPIAAElT0LSAAABEgAQALC2LjDb zBLrVBjdcCTLy0=&X-OWA-CANARY=6KuEe7zZyES55IssB_JyedG4EpT2nNMI_wcRXeIh3XVqDJHFesg2-X5njJmchSFBL1ZEzLlVFHA.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.