Reminiscent

@FEVING said:
found a couple of malware and link to the resume.zip , analysis shows powershell calls but cant find the flag , is there something i am overlooking?

maybe dumping the powershell processes and searching will help?