Benign windows Download

posfordotnet.install

Legitimate Microsoft package installer

Accesses temp environment variablePS1 file written to disk
SHA-256d2cfc6675866635223b3b825a9cc240c5a0df402a4dfe59d74ff97aaf39805c0
URLhttps://community.chocolatey.org/api/v2/package/posfordotnet.install
MaleculeO(C₂)H₃(CmFPo)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.