home

b7870def-ff48-5388-2402-2c7ac080a2fd_1d1d9fb64092958

MD5:
fd9a980972ad101bf2f365a302f86767

SHA-1:
458926590430aab0498a46d8012f92596d28d944

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 11:55:07 AM UTC  (today)

File size:
1.4 KB (1,403 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\b7870def-ff48-5388-2402-2c7ac080a2fd_1d1d9fb64092958

The file b7870def-ff48-5388-2402-2c7ac080a2fd_1d1d9fb64092958 has been seen being distributed by the following URL.

https://citrix.dcfs.illinois.gov/Citrix/dcfsctx100Web/Resources/.../RENGU0NUWDEwMCBDb250cm9sbGVyLlNBQ1dJUw--.ica?CsrfToken=63532349295C3A4B0A64057E8BF062DD&IsUsingHttps=Yes&launchId=1467993785930

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.