home

confirmation.rtf

MD5:
eaf8f08662c8600b88a7427a9abc4ab9

SHA-1:
ce7ee0c83cafb5841b1f15f93d9708f0b86e5bdc

SHA-256:
df3bbe9a7dd2187b2bab0da7d82e1ac00ba2ab30c9d9bad721e6764e80ded3c8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 1:26:37 PM UTC  (today)

File size:
73.7 KB (75,419 bytes)

Common path:
C:\users\{user}\downloads\confirmation.rtf

The file confirmation.rtf has been seen being distributed by the following URL.

https://www.dwpe-services.direct.gov.uk/portal/page/portal/jsaol/lp?_rtarget=302_76075_302_66362_66362&_piref302_76075_302_66362_66362.__ora_type=proxy&_piref302_76075_302_66362_66362.__ora_resource=http://10.33.140.76:7150/jsaol/portletresource/C:51.71.221.10:-20acf1d0:1455583060f:-7fdb/S:51.71.219.202:1a5d1d7b:1519de5d16f:7991:E:nJsaolPortlet:51.71.221.10:-20acf1d0:1455583060f:-7fd1/.../print?report=confirmation&mimetype=rtf&language=en&country=GB&portletwindowid=51.71.219.202:1a5d1d7b:1519de5d16f:7991&_piref302_76075_302_66362_66362.__ora_checksum=e57644176dec9071c3a433fdfb47727f9b05054c

Scan confirmation.rtf - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.