home

609a2442-3c20-9a6c-a3e6-de6fbe6d0985_1d1c100442d6974

MD5:
03df9b35a86d9629aafffb43767c5a84

SHA-1:
f3d308f113ed1aede123b16a75bfe5a5d40ef9ff

SHA-256:
3bfeb9a86301c079525dd316cac0868b927d4edd7bd5fedf31027c1df838f430

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/9/2026 2:53:22 AM UTC  (today)

File size:
1.6 KB (1,652 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\609a2442-3c20-9a6c-a3e6-de6fbe6d0985_1d1c100442d6974

The file 609a2442-3c20-9a6c-a3e6-de6fbe6d0985_1d1c100442d6974 has been seen being distributed by the following URL.

https://branded.t-mobile.com/Citrix/TPRi1/.../launch.ica?CTX_Application=Citrix.MPS.App.Retail_Polaris.My WorkLife - SAP Portal&CTX_AppFriendlyNameURLENcoded=My WorkLife - SAP Portal&LaunchId=1465247092987

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.