49.232.251.55 · WeChatApp.exe

/AppData/Roaming/Tencent/WeChat/XPlugin/Plugins/XWeb/732/extracted/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample

The password is "infected"