home

tr.zip

MD5:
e9aa53f3846bc03ebca5701144ffcfea

SHA-1:
136781355a7e938c97f686c0d0d4c040e2a0b28e

SHA-256:
9bd06904904fac6cebfcfe92a3a539523dd4351b84bf1f14473cee443d5d8338

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/16/2026 11:39:47 PM UTC  (a few moments ago)

File size:
736.6 KB (754,234 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\tr.zip

The file tr.zip has been seen being distributed by the following URL.

https://dub110.afx.ms/.../GetAttachment.aspx?file=d8c40c16-6a89-42cf-9f02-09cb7020ca8a.zip&ct=YXBwbGljYXRpb24vemlw&name=dHIuemlw&inline=0&rfc=0&empty=False&cid=70979f5ebf440177&shared=1&biciPrevious=8e9facb2-56e5-48e9-8714-fcf6a1afa4d1_00a32f1f473_5722&hm__login=liloude&hm__domain=hotmail.fr&ip=10.211.20.8&d=d3744&mf=0&hm__ts=Sat, 28 May 2016 15:01:28 GMT&st=liloude%hotmail.fr@7&hm__ha=01_7a972b9c2ec99cdfd51f759e8874bc8dcac56db2b093a5b3cffaee40860bff49&oneredir=1

Scan tr.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.