home

79a389cf-481b-5560-c802-8070859099f2_1d1b8ad95f819a7

MD5:
5db05a8874c32397cecd8fd91dcec517

SHA-1:
40fa698dd047fd27d1d2b60bb86484693fe51416

SHA-256:
90a840664c9cc93da9e1880c38ee7b5a19e248698a55e32ef3088c08a27d1432

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/8/2025 7:25:33 PM UTC  (today)

File size:
12.2 KB (12,469 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\79a389cf-481b-5560-c802-8070859099f2_1d1b8ad95f819a7

The file 79a389cf-481b-5560-c802-8070859099f2_1d1b8ad95f819a7 has been seen being distributed by the following URL.

https://webmail.toimisto.elisa.fi/owa/service.svc/.../GetFileAttachment?id=AAMkADMzMjAzYmNhLWI5MjQtNGFiYi1hYjI3LTU0ZTlhOTczNjYxNQBGAAAAAABmsQ3hiqybRq3tfiGlL8kdBwCaIRvkHw2zSLZdr3Lqc5BnAAAAAAEMAACaIRvkHw2zSLZdr3Lqc5BnAABzgm0SAAABEgAQAKn9MklkfuNAtaIZFNxMadQ=&X-OWA-CANARY=tLGSSDj44EuDDnTGsTc1R_5SZ4f7hdMIGwmHH8Ku-P1GC82q1cCV3rKNgArziEwHnWwZMCX8aZ4.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.