Files named windows11pro_kvm-sql_server-express_2017.ps1

speedtest-c001.cloudclusters.io · windows11pro_kvm-sql_server-express_2017.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 30c1b7353661e356dfd6bf8e23b883d4501e0b00
SHA256: e9264e4cda7dcfcb38e7d66f7b549c1d9019b88dfe0f95d0ac7cef121f45eaea
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
download.cloudclusters.io · windows11pro_kvm-sql_server-express_2017.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 30c1b7353661e356dfd6bf8e23b883d4501e0b00
SHA256: e9264e4cda7dcfcb38e7d66f7b549c1d9019b88dfe0f95d0ac7cef121f45eaea
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
speedtest-c005.cloudclusters.io · windows11pro_kvm-sql_server-express_2017.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 30c1b7353661e356dfd6bf8e23b883d4501e0b00
SHA256: e9264e4cda7dcfcb38e7d66f7b549c1d9019b88dfe0f95d0ac7cef121f45eaea
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
download.cloudclusters.io · windows11pro_kvm-sql_server-express_2017.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 30c1b7353661e356dfd6bf8e23b883d4501e0b00
SHA256: e9264e4cda7dcfcb38e7d66f7b549c1d9019b88dfe0f95d0ac7cef121f45eaea
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC
speedtest-c001.cloudclusters.io · windows11pro_kvm-sql_server-express_2017.ps1

/appinstall_vps/windows/windows11pro_kvm/sql_server/

United States · AS40676

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 30c1b7353661e356dfd6bf8e23b883d4501e0b00
SHA256: e9264e4cda7dcfcb38e7d66f7b549c1d9019b88dfe0f95d0ac7cef121f45eaea
application/octet-stream
8.04KB
2025-12-03 02:56:18 +0000 UTC