home

login.htm

MD5:
7760b3b866419d64cbb1bc3ff5faf31f

SHA-1:
952b12bf3aef7be7b51580e8e903478897cf55e4

SHA-256:
635f8603060be8b0244738e0927f4f4016df92d80f3a4d00d692604353906fc0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 6:02:23 AM UTC  (today)

File size:
1.4 KB (1,483 bytes)

Common path:
C:\users\{user}\downloads\login.htm

The file login.htm has been seen being distributed by the following URL.

https://login.microsoftonline.com/login.srf?wa=wsignin1.0&rpsnv=4&ct=1466737081&rver=6.6.6556.0&wp=MBI_SSL&wreply=https://outlook.office365.com/owa/service.svc/.../GetFileAttachment?id=AAMkADE4NTUxMGVmLTA2NzktNDdmZS1iZGQzLWRhODRmZjY2M2I3OQBGAAAAAAD6NPiNXnwOTaI ms30mzqPBwBJiZIg1Ov3QYykOCbmYIKoAAAAAAEJAABJiZIg1Ov3QYykOCbmYIKoAAAXQ6hNAAABEgAQACETirlvOIhGlR4BFChB4A0=&X-OWA-CANARY=nBYnFhYByUaCRW1pZ8CPnvBxfgTomNMYHw_ca7FG_U7fTxb9SlAUjIzmrwpvoItHAAEwhp5Eu4Y.&realm=mabbank.com&id=260563&whr=mabbank.com&CBCXT=out&msafed=0

Scan login.htm - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.