"Your file is ready to download" scam - MSI payload

[Archevod]

Link (DANGEROUS):

Спойлер

https://gp0n0e86iwgzss2r72lhof.quasi-politic.rest/post/JHXNsO32XuIDV1

Scan results: VirusTotal

 1289a868933822979797a526e6fab52460940f1c9dd9231879ecf7da920b9b41 | Triage

Extra Info: Looks like some kind of a crypted RAT, installs itself in system32 and drops a shortcut to startup.