pass. infected
/applications/core/interface/file/attachment.php?id=4021" data-fileid="4021" rel="">explorer.zip
It is indeed a downloader. Detection will be added.
