Files named windows11pro_kvm-sql_server-express_2016.ps1

speedtest-c001.cloudclusters.io · windows11pro_kvm-sql_server-express_2016.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 3c947ff0b905c938d0203158f87a2124989ebdd7
SHA256: 68692adc2761687435b8d9c4c85aae5a59a0aac234a2811f8bb287453b221f8d
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
download.cloudclusters.io · windows11pro_kvm-sql_server-express_2016.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 3c947ff0b905c938d0203158f87a2124989ebdd7
SHA256: 68692adc2761687435b8d9c4c85aae5a59a0aac234a2811f8bb287453b221f8d
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
speedtest-c005.cloudclusters.io · windows11pro_kvm-sql_server-express_2016.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 3c947ff0b905c938d0203158f87a2124989ebdd7
SHA256: 68692adc2761687435b8d9c4c85aae5a59a0aac234a2811f8bb287453b221f8d
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
download.cloudclusters.io · windows11pro_kvm-sql_server-express_2016.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 3c947ff0b905c938d0203158f87a2124989ebdd7
SHA256: 68692adc2761687435b8d9c4c85aae5a59a0aac234a2811f8bb287453b221f8d
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
speedtest-c001.cloudclusters.io · windows11pro_kvm-sql_server-express_2016.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 3c947ff0b905c938d0203158f87a2124989ebdd7
SHA256: 68692adc2761687435b8d9c4c85aae5a59a0aac234a2811f8bb287453b221f8d
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC