home

café_riveroll.zip

MD5:
f517956d913ad3a7349c63715f65a095

SHA-1:
ed83ddce37930de666e9ed48e9396924e2e10e5d

SHA-256:
750af32e06df00b2bfe0a551bb754311a66c8ac4bfb15b4211aaa563d2caa262

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
2/25/2025 2:56:05 PM UTC  (today)

File size:
9.1 KB (9,311 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\café_riveroll.zip

The file café_riveroll.zip has been seen being distributed by the following URL.

https://webmail2.prodigy.net.mx/cgi-bin/.../CAFÉ_RIVEROLL.zip?ID=IBZV4lPZwExM_1gGypDcsGS8pxTAgbMxDp7sAdDs4VTYeLQx5MxFw3TJhE5ts&Act_View=1&R_Folder=SU5CT1g=&msgID=11882&Body=2&filename=CAFÉ_RIVEROLL.zip

Scan café_riveroll.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.