home

873a3db2-3214-1f24-3081-6353be1d1a58_1d1b7481e366dbf

MD5:
4da50a79518a4cfdc1fd7a690ffc4423

SHA-1:
519f981404dba714702e6fd2c30eeb04b5e222b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:02:31 AM UTC  (today)

File size:
44 KB (45,056 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\873a3db2-3214-1f24-3081-6353be1d1a58_1d1b7481e366dbf

The file 873a3db2-3214-1f24-3081-6353be1d1a58_1d1b7481e366dbf has been seen being distributed by the following URL.

https://mex06.emailsrvr.com/owa/service.svc/s/GetFileAttachment?id=AAMkADE2MjRiNGMwLTJmMDUtNDZhYS05MDI3LTc4NzBhZjZhNTNhMgBGAAAAAABOX6v PKBvQqSZXs9JFYzpBwCEAnSdj9M4TpR/.../SPIAAAAAAEMAACEAnSdj9M4TpR/.../SPIAAEdHz8VAAABEgAQAAyxO9KnWvJPou4u5F8u8qE=&X-OWA-CANARY=xSwUsj0XukulR5NhphKvjmN6aROWhNMIA7IUch1TOR3F4mpDsjvStkerdnThL4QH9dnYgHckpjY.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.