149.202.94.106 · win-acme.v2.1.17.1065.x64.trimmed.zip

/dev.microland.es/install/composer & google/

France · OVH SAS

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample

The password is "infected"