home

booking.zip

MD5:
92256a00a31a0a123446941d48a6e110

SHA-1:
2e36eac9a4687a9fdc1c3db18a7396fc1a73a4e2

SHA-256:
38231123bdad5678b43218d86fb4b2421fc89c98768e0e4c2b6141924f5b8499

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/8/2026 2:15:52 PM UTC  (today)

File size:
96 KB (98,277 bytes)

Common path:
C:\users\{user}\downloads\booking.zip

The file booking.zip has been seen being distributed by the following URL.

https://dub124.afx.ms/.../GetAttachment.aspx?file=65b2115c-d09f-4df3-aaca-6e0d1cee7168.zip&ct=YXBwbGljYXRpb24vemlw&name=Qm9va2luZy56aXA_3d&inline=0&rfc=0&empty=False&cid=9c9f8c62276e28de&shared=1&biciPrevious=0def4802-61bc-4327-8d77-78c63e6aea57_054cb5b0f36_5724&hm__login=alfarqad.est&hm__domain=hotmail.com&ip=10.111.28.8&d=d3828&mf=0&hm__ts=Mon, 25 Jul 2016 07:06:22 GMT&st=(00060000C698EFBA)&hm__ha=01_8fa7fa52649a8eede5afc891d3dc83bd26b9d12a9c3be5a252b7755ae274e417&oneredir=1

Scan booking.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.