home

f1a1f98c-5e4d-c1da-763c-a0eb6be32943_1d1dbfbb11672dc

MD5:
e39366fe4435f2d7d8dde673eb28a5da

SHA-1:
0d18e4e3c108bdaa10ef6ced6e71598b21f417c1

SHA-256:
e29c39f8ab7c6925f6a00b9e8dd30c1cbf6887ff3faaee42af1c23a68be8ba52

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 3:47:59 AM UTC  (today)

File size:
2.1 MB (2,234,347 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\f1a1f98c-5e4d-c1da-763c-a0eb6be32943_1d1dbfbb11672dc

The file f1a1f98c-5e4d-c1da-763c-a0eb6be32943_1d1dbfbb11672dc has been seen being distributed by the following URL.

https://mail.mof.gov.sa/owa/service.svc/.../GetFileAttachment?id=AAMkADA0MTRlZjI3LThmN2YtNDE2Yy1iMzA3LTJlYjhiMmQ3NWE1ZQBGAAAAAAAXjN3w0bkgTZz8GaBXGujTBwBpuLds6tg RqJC5ad4bFSpAAAABvLxAADHkkjGSL7ETqgx9Tk5pjM4AAE1CjneAAABEgAQAHaOcCxgTQxFhNTJjuhJmcM=&X-OWA-CANARY=-_BlVOLIUUGMJwlNw6PETAD5mqRJqdMIcljGPhVEKJK5GS4GEI0WRG-BBVWgLQXcvc0_869Blzg.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.