home

f8199fb7-0f32-34e6-afc2-86958f8444aa_1d1cd55de6c859a

MD5:
7bca1c564be233db53a42fb71515ba62

SHA-1:
3e4d816f447b7877ea059149d74689f42865cc6d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/15/2025 9:43:32 AM UTC  (today)

File size:
27.5 KB (28,144 bytes)

Common path:
C:\ProgramData\microsoft\microsoft antimalware\scans\filesstash\f8199fb7-0f32-34e6-afc2-86958f8444aa_1d1cd55de6c859a

The file f8199fb7-0f32-34e6-afc2-86958f8444aa_1d1cd55de6c859a has been seen being distributed by the following URL.

https://mail.kfshrc.edu.sa/owa/service.svc/s/GetFileAttachment?id=AAMkADUxYjhlMjg4LTczNDgtNGRmOC05YjljLTQyNDU3MGQ2N2ZkNgBGAAAAAADPOAW9yYmRRqb7lz70RosrBwCcCNEcBE6GQ7YFiT9VhKICAD/.../Zno5IfDXTZOaz6XnCIC2AABN7S2bAAABEgAQALXMnULQ6LpHhaaNeHtUnuw=&X-OWA-CANARY=FneuiNrf8Uadas6YGIoqPrDtQtSjmtMIj9dtbAFot0ASBMwvQDc-MzbLwfk2oZyUP1nlJl1AoGA.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.