home

login.htm

MD5:
6bacab2c583bbe84e73c2ae72035ce3f

SHA-1:
db371cec35ec7d672b06f4e368544b38bbb548b0

SHA-256:
91ec9974ac18d7676ee884ac3179f769bfe49c53cb9458cbacd38493c86f04da

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/16/2025 7:17:31 PM UTC  (today)

File size:
12.9 KB (13,192 bytes)

Common path:
C:\users\{user}\downloads\login.htm

The file login.htm has been seen being distributed by the following URL.

https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=12&ct=1465133499&rver=6.6.6556.0&wp=MBI_SSL&wreply=https://outlook.live.com/owa/service.svc/s/GetFileAttachment?id=AQMkADAwATY3ZmYAZS1lYzUzLWQwZTMtMDACLTAwCgBGAAADkO/GqyPE1kG/.../Ll0nLw4AAAIBDAAAAAkuuJQK voAT5yevy5dJy8OAAAAglgchAAAAAESABAAeJo8lMtec0mVqpYq1xCRAw==&X-OWA-CANARY=84LlXpA0fkifLTb6_8s-s_Bn_atFjdMYEfVeIG7IDbBLP9j_lTMKDGmGsNGLgTZ5IgFIkVNMnpM.&id=292841&CBCXT=out&fl=wld

Scan login.htm - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.