Casn you email that file to me in a Password protected RAR file to (Deleted)
Password: infected
I’m going to be running it in my VM to see what changes it makes etc.
Thanks!