42.112.104.124 · Microsoft-Activation-Scripts.zip

/Windows/

Vietnam · FPT Telecom Company

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"