Timeline
Probably Emotet
MD5 8baa9b809b591a11af423824f4d9726a
RoboHash:
Tue Jun 9 11:01:57 CEST 2015
started win2 already infected
Wed Jul 8 00:42:42 CEST 2015
poweroff