The MediaFire URL led to a password-protected file (Setup_Pswrd_1234. rar) containing an executable (Setup.exe) that, if executed, Proofpoint