home

login_es.htm

MD5:
820568485cc0d2d4f6611f1523bd8ad3

SHA-1:
5d4c129ee795d069759875d860a771db7c1eb59b

SHA-256:
ec71fef2bfd7ddfe256677ef90b3966bba7c661b6495618f84e16a3cc7b64cc0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/2/2026 3:16:42 AM UTC  (today)

File size:
23.3 KB (23,903 bytes)

Common path:
C:\users\{user}\Pictures\login_es.htm

The file login_es.htm has been seen being distributed by the following URL.

https://benefits.paychex.com/cgi-bin/contactus_es/login_es?TYPE=33554433&REALMOID=06-95fbfbc8-48ea-1017-a633-840256d40cb3&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=-SM-gIoJD8UQmzy5aOS2rG/lfHmYJmES 9/zQnK2nOkj8lwZfq3l4y3KFgtgx4RHfBp4&TARGET=-SM-HTTPS://benefits.paychex.com/.../file?token=2c77913b--1afe--4303--ac60--6c8fdbb4e7bc

Scan login_es.htm - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.