home

welcome to phase i.zip

MD5:
85d93711aa6db74fb5c2a712bb924805

SHA-1:
c3809545d25fb90eddd5d476a2b367c62925a859

SHA-256:
a0a9a71f738ee2633e3bf9fe3d8c36a9f0f9eb6917d40fe1e272e5150202e02a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/8/2026 12:28:04 PM UTC  (today)

File size:
938 KB (960,554 bytes)

Common path:
C:\users\{user}\downloads\welcome to phase i.zip

The file welcome to phase i.zip has been seen being distributed by the following URL.

https://dub119.afx.ms/.../GetAttachment.aspx?file=4b4d6ca7-10a6-4607-95a6-08281c02aa91.zip&ct=YXBwbGljYXRpb24vemlw&name=V2VsY29tZSB0byBQaGFzZSBJLnppcA_3d_3d&inline=0&rfc=0&empty=False&cid=bf7e70ea959a9f90&shared=1&biciPrevious=7da0cc45-8e16-4f19-bb1c-0ceeb304777a_00b957b4483_10420&hm__login=revjfad&hm__domain=live.com&ip=10.111.6.8&d=d1798&mf=0&hm__ts=Thu, 17 Sep 2015 05:42:29 GMT&st=revjfad%live.com@7&hm__ha=01_f67b7d2e6f1839410a57b6c1f95117f936d672efc516a06c3164c49dd64f5060&oneredir=1

Scan welcome to phase i.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.