QUARANTINED 2026-09-28: unauthorized Google verification file (attacker). Original preserved in EVIDENCE-malware-20260928.zip.