This abuse not detected? While netcraft is quite conclusive, reported at URLhaus as malware download:
Re: https://urlhaus.abuse.ch/url/2556737/ & https://sitereport.netcraft.com/?url=http://85.31.45.243
Netcraft risk rating 10?10.
Win32.exe malware: https://www.virustotal.com/gui/ip-address/85.31.45.243/relations
Two vendors to detect sofar: https://www.virustotal.com/gui/url/f1376d788b73c113d848a45f079562e584176817ef5e8382bc3cb08b2b975c96
polonus