home

df16f0bc-91a8-6aaa-56e0-5c8b296aec2c_1d1cd61ab818ef2

U.S. Government

Publisher:
U.S. Government  (signed and verified)

MD5:
da800fc5512a01ab4822bb800adefbd9

SHA-1:
9b53fdb03d28bc8d0af13127683c921996dee508

SHA-256:
5bfb932173c719c5c6c6933860cd7b411268d6fa1f535ab386da3798b47e0210

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/8/2024 9:28:25 PM UTC  (today)

File size:
5.5 KB (5,651 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\df16f0bc-91a8-6aaa-56e0-5c8b296aec2c_1d1cd61ab818ef2

Digital Signature
Signed by:
U.S. Government

Authority:
U.S. Government

Valid from:
7/23/2015 8:00:00 PM

Valid to:
7/23/2018 7:59:59 PM

Subject:
CN=CRONKHITE.CATHERINE.K.1365471386, OU=USA, OU=PKI, OU=DoD, O=U.S. Government, C=US

Issuer:
CN=DOD EMAIL CA-32, OU=PKI, OU=DoD, O=U.S. Government, C=US

Serial number:
3A4E41

The file df16f0bc-91a8-6aaa-56e0-5c8b296aec2c_1d1cd61ab818ef2 has been seen being distributed by the following URL.

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-ow18XAuQaHUAQyuYETzsqDBV0kSGLRrOTRUJ910zEz2U6CV6p6F_cLLMSdOzvN2jGH4nkLovJSeSm65J69qU1w/messages/@.id==ACV3w0MABIayV2laqQ2UkLm3twY/content/parts/@.id==2/raw?appid=YahooMailNeo&ymreqid=3ecc4033-873f-2ac0-0111-100033010000&token=5gPFnNLC7SAOKZ1_IFVbfNkhF8dNHHQRDSavp6YnpXFYcksuWU9P1N5zm8iJNxE8_tmbZU_QP6bd5QzJLzvu9w&error=https://mg.mail.yahoo.com/.../iframemsg?id=3f8a5a4e-5363-7c68-df82-de3a63428370

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.