home

express.zip

MD5:
791ae57dc8cfd503b204fbc9412bfe0a

SHA-1:
c3dcad60f96049badfc9d7bc8a371cdacbaf028b

SHA-256:
e01c4da6d2683e4b5c6bba9cbd240a9a9ab34b6be77eea4501558edd1ce930aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/8/2026 2:16:22 PM UTC  (today)

File size:
224.8 KB (230,162 bytes)

Common path:
C:\users\{user}\downloads\express.zip

The file express.zip has been seen being distributed by the following URL.

https://dub124.afx.ms/.../GetAttachment.aspx?file=cfdc0092-bfb9-405f-b936-cb726034f22e.zip&ct=YXBwbGljYXRpb24vemlw&name=RXhwcmVzcy56aXA_3d&inline=0&rfc=0&empty=False&cid=9c9f8c62276e28de&biciPrevious=3f0c99a5-fc9c-4e43-baa6-6a7ccc0b607b_0363b9ca410_5724&hm__login=alfarqad.est&hm__domain=hotmail.com&ip=10.111.28.8&d=d3828&mf=0&hm__ts=Sun, 31 Jul 2016 12:36:45 GMT&st=(00060000C698EFBA)&hm__ha=01_62e3d6c67718330c28168f02440e012553855c647b6a8b6a229215622b3fcc5d&oneredir=1

Scan express.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.