home

cfc71494-f227-9521-6449-81c43f93759b_1d1d3d4c7f7df6e

MD5:
f28c6469326f72048a5c756b993b0f17

SHA-1:
10557f35e00b712411d930e49b23d16a49e4b284

SHA-256:
231c54642fba5c2f7c082e88c829f223710b2aa5c205f84de492a151538cfea2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:48:30 PM UTC  (today)

File size:
208.6 KB (213,587 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\cfc71494-f227-9521-6449-81c43f93759b_1d1d3d4c7f7df6e

The file cfc71494-f227-9521-6449-81c43f93759b_1d1d3d4c7f7df6e has been seen being distributed by the following URL.

https://owa.glovis.mx/owa/service.svc/.../GetFileAttachment?id=AAMkADIwNTQyN2JmLTQ1ZjAtNDRjMC05MjRkLTFhOGZmNTk3ODA0OABGAAAAAAA1bI4bDvX9SJZSeKBsPd97BwBDwsqa4HL7S6F8kfUOnhEBAAAAAAENAABDwsqa4HL7S6F8kfUOnhEBAAAksh1VAAABEgAQAEk9ozJwnn5PgzmMA6N6X8E=&X-OWA-CANARY=lRDgBSAQrkuUxFxJKFkYPr0fO74eodMIg4lNSlJwBjNQYrLdu3RgN6ntnMblLfXHfu2o7Wth6tw.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.