home

d5998318-5b30-90f4-c81d-0bd8e5b1c6bf_1d1b89924a08987

MD5:
a6644033094028f13c7daa752a4edf3c

SHA-1:
032ddc373607fe17f7531baeacccb83e1e206838

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 6:37:31 AM UTC  (today)

File size:
42 KB (43,008 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\d5998318-5b30-90f4-c81d-0bd8e5b1c6bf_1d1b89924a08987

The file d5998318-5b30-90f4-c81d-0bd8e5b1c6bf_1d1b89924a08987 has been seen being distributed by the following URL.

https://west.exch080.serverdata.net/owa/service.svc/.../GetFileAttachment?id=AQMkADU2Y2I0NzlmLWM3MjktNGEyOC04ZTA5LTM2Nzk4MjhmZDhmNABGAAADUeamLNRcH02Ef73lzAh 6wcA5kYG9utcb0yNoT0UADaW3QAAAgEMAAAA5kYG9utcb0yNoT0UADaW3QABWXC01gAAAAESABAAK7ZWwamlOkWPDHez8Jmavg==&X-OWA-CANARY=hWge3ji9s0C2vIHOoNGgx-0hXwfnhdMIB4axw9wvGAFRR5oepw0gybABXfu1Q59trzvUPbv6_vo.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.