home

593f813d-c486-908e-1a57-436891115079_1d1c0d888623b54

MD5:
99adc46554a1fe875ff881c4971461ee

SHA-1:
ffe63b2434b0e1d94235030984c7982b03c20c4c

SHA-256:
9a6af161d9cae393a78448a1b54811416020fa84bafc1790b773e6afe2a8a9ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/9/2026 2:53:16 AM UTC  (today)

File size:
1.6 KB (1,652 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\593f813d-c486-908e-1a57-436891115079_1d1c0d888623b54

The file 593f813d-c486-908e-1a57-436891115079_1d1c0d888623b54 has been seen being distributed by the following URL.

https://branded.t-mobile.com/Citrix/TPRi1/.../launch.ica?CTX_Application=Citrix.MPS.App.Retail_Polaris.My WorkLife - SAP Portal&CTX_AppFriendlyNameURLENcoded=My WorkLife - SAP Portal&LaunchId=1465229524042

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.