home

f1ef9a92-28c5-5e2f-cfa6-6e5694592864_1d1e4dbd2a9d023

MD5:
971066f8f70d8da16457a42e3db3d4db

SHA-1:
eff1e7cc8c7d026c536270a173b9a1bb20083f59

SHA-256:
b391c6333748b2c1c839c74d229d6454cf15b6ef23fd68891572fc5d7103cd6b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:11:18 AM UTC  (today)

File size:
1.6 KB (1,616 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\f1ef9a92-28c5-5e2f-cfa6-6e5694592864_1d1e4dbd2a9d023

The file f1ef9a92-28c5-5e2f-cfa6-6e5694592864_1d1e4dbd2a9d023 has been seen being distributed by the following URL.

https://gateway.consolidatedhealth.ca/Citrix/CAGTSSO/.../launch.ica?CTX_Application=Citrix.MPS.App.XenAppFarm.!Meditech`&CTX_AppFriendlyNameURLENcoded=!Meditech`&CTX_Token=EB0617EABED0F072F8FF6ADBA9170A5C&LaunchId=1469189691330

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.