Popup - FreeVPN: High Speed, Anonymous & 100% Free VPN Service for Microsoft Windows
A WhoIs lookup reveals the domain was registered vi NameCheap on March 22, 2018 (Updated February 25, 2021) - Whois freevpn.win
VirusTotal - VirusTotal
Associated Email Address - [email protected]
Associated Skype Account - keen.mediagroup
Malware comes from Keen Internet Technologies Ltd, a subsidiary of Keen Media Group. It’s offices are located in Herzliya, Israel.