Malware detected as Win32:Malware-gen by avast's

[polonus]

See: https://urlquery.net/report/3fa297b3-df8b-43b5-ada8-8d4c4bfd2c52
Re on that IP: https://www.maltiverse.com/ip/84.10.41.18
VT detects: https://www.virustotal.com/#/url/40c85215df4dae8d118892d0e1520f851a7512ab2a9a533a1aa8648ecb6cadc0/detection
and https://www.virustotal.com/#/domain/www.hoba.pl & https://www.virustotal.com/#/url/5ffb42ec32f6c41d02cf462799d3b8a53b1060b0ab7f55fe01a8be306943b9a4/detection
While searched for pirlo-exe we stumble at: https://www.reverse.it/sample/b3c83fa8c3a1f212c0ce85a318bddf5925b53b0a45d2f6a44983c432e6407745?environmentId=100
for an analysis,

polonus

[TrueIndian]

Looks like the entire directory of /test-jarek is someone’s personal collection from 2017.