: Permanently delete the file and empty your recycle bin.
: This archive typically acts as a "dropper." It contains obfuscated executables or scripts (like .vbs or .js) designed to download and install secondary payloads such as RedLine Stealer , Agent Tesla , or Formbook [2, 5].
: Often associated with high detection rates on VirusTotal (e.g., 50+/70 engines flagging it) [1, 2]. Target OS : Windows [4]. Recommended Actions
: Once extracted and executed, the contents attempt to steal browser cookies, saved passwords, and cryptocurrency wallet data [3, 5].
The file is identified as a malicious archive, frequently associated with malware distribution and credential harvesting [1, 3]. It is often delivered via phishing emails or hosted on suspicious file-sharing domains [4]. Security Analysis
: Perform a deep scan of your system using an updated antivirus like Microsoft Defender or Malwarebytes [2, 3].
: It connects to remote Command and Control (C2) servers to upload stolen data [5]. Technical Indicators
