home

bf433a3a-edf1-71fd-0d1c-644ffe7d1cc6_1d1da82e6f48711

MD5:
3672affed490c8892183d94730821665

SHA-1:
87909bd6ccad9b8428022b949ca2d483c2fbbb4f

SHA-256:
d50af8454559a779f2200c472c743b7cc3a273a8fd1705b885ea4e02e547b556

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/5/2025 4:09:00 PM UTC  (today)

File size:
58.1 KB (59,449 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\bf433a3a-edf1-71fd-0d1c-644ffe7d1cc6_1d1da82e6f48711

The file bf433a3a-edf1-71fd-0d1c-644ffe7d1cc6_1d1da82e6f48711 has been seen being distributed by the following URL.

https://mail.acg.com.kw/owa/service.svc/.../GetFileAttachment?id=AAMkADViMWEyNzA5LTY1MzItNGJlZS05ZmM3LWJiY2I4MjU0ZGViMwBGAAAAAAA6RKG7JDGCRbWWjTCmVn1fBwB4BC1RVPDAR6Ro2gDYyk4uAWkQVcJbAABDAM7ayMK3QYFRl8WHuY 4AACHRIrgAAABEgAQAJh9wu0ggCpEkbdtTb6uBNA=&X-OWA-CANARY=450ezz2Fy0-xBdTqZPWQ-wsE5lbRp9MISRt1fUyoHDIb2wfg3A0t5_lu0YFaZ6hG0ZuSkuDoH6U.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.