home

rg.zip

MD5:
44ade48c2f525d0fe293267bce3d558b

SHA-1:
50f0f2a3468ab2f1836e928bd9dc01e06ee1166c

SHA-256:
eb877e0d3545397c1685a25f26675c78890f80daf8e28ff11e5e7130dd47e9cd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/9/2026 6:03:51 AM UTC  (today)

File size:
1.5 MB (1,619,163 bytes)

Common path:
C:\users\{user}\downloads\rg.zip

The file rg.zip has been seen being distributed by the following URL.

https://blu183.afx.ms/.../GetAttachment.aspx?file=bcd79238-d07e-4cb6-948a-f5f7b4414cdb.zip&ct=YXBwbGljYXRpb24vemlw&name=Umcuemlw&inline=0&rfc=0&empty=False&cid=9020491c9ce8a723&shared=1&biciPrevious=6568dde5-22c3-4f27-9b8d-352c82884423_006f7aa333b_5709&hm__login=md.lima&hm__domain=hotmail.com&ip=10.148.100.8&d=d2939&mf=0&hm__ts=Fri, 03 Jun 2016 01:14:58 GMT&st=(00067FFE96A3A7C1)&hm__ha=01_14e11ca5697c5df2afb2e7ae0347756f32b387aa269694f40aecdc9a955cecb7&oneredir=1

Scan rg.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.