Antigen for Exchange found decrypt-password.exe matching =*.exe file filter. The file is currently Purged. The message, "Re: Your password!", was sent from rodolphe.vagner@eurodoc-sofilog.com and was discovered in SMTP Messages\Inbound located at Questerra/First Administrative Group/QTCAEX01.