home

confirmation.rtf

MD5:
670a2b5dd21c565355ca9dc7a39a94be

SHA-1:
8f548b56eed40a61e407fc88abbefa3f1c08e18b

SHA-256:
76792cf267626c3d0b75a16d404a5e7e99db741d923c8f1817b7b63ce28c4118

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:01:46 PM UTC  (today)

File size:
94.6 KB (96,862 bytes)

Common path:
C:\users\{user}\downloads\confirmation.rtf

The file confirmation.rtf has been seen being distributed by the following URL.

https://www.dwpe-services.direct.gov.uk/portal/page/portal/jsaol/lp?_rtarget=302_76075_302_66362_66362&_piref302_76075_302_66362_66362.__ora_type=proxy&_piref302_76075_302_66362_66362.__ora_resource=http://10.33.140.76:7150/jsaol/portletresource/C:51.71.221.10:-20acf1d0:1455583060f:-7fdb/S:51.71.219.201:6b8ad8db:155461cbb82:1085:E:nJsaolPortlet:51.71.221.10:-20acf1d0:1455583060f:-7fd1/.../print?report=confirmation&mimetype=rtf&language=en&country=GB&portletwindowid=51.71.219.201:6b8ad8db:155461cbb82:1085&_piref302_76075_302_66362_66362.__ora_checksum=b309aea374edeb7aa1f439a9f094d0064400bef4

Scan confirmation.rtf - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.