home

d9155fd8-d855-f01c-ab70-10c7cc9979d8_1d1cd54d7163bf4

MD5:
07c62384438f94bc427c0bcaf8cc47d8

SHA-1:
5b6e95db27960afd1ed594947a25d4062e9378f1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/4/2025 2:39:12 AM UTC  (today)

File size:
16.7 KB (17,145 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\d9155fd8-d855-f01c-ab70-10c7cc9979d8_1d1cd54d7163bf4

The file d9155fd8-d855-f01c-ab70-10c7cc9979d8_1d1cd54d7163bf4 has been seen being distributed by the following URL.

https://mail.kfshrc.edu.sa/owa/service.svc/s/GetFileAttachment?id=AAMkADUxYjhlMjg4LTczNDgtNGRmOC05YjljLTQyNDU3MGQ2N2ZkNgBGAAAAAADPOAW9yYmRRqb7lz70RosrBwCcCNEcBE6GQ7YFiT9VhKICAD/.../Zno5IfDXTZOaz6XnCIC2AABdbjdXAAABEgAQAAeS9v4c8cBHrcOaOljGqI4=&X-OWA-CANARY=8Dp_RGpOHEStqaL1yVoKBEm5jcmimtMIzwpjnbpLtSSK1gZzRIwsC09S06AbYM5uuTReqxpfbJg.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.