Files named AppOnFlyGaming-win-Portable.zip

agent.aofg.dev.cmis.cz · AppOnFlyGaming-win-Portable.zip

/

·

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 7398dbf8cdf22311b917d4c14d75ba5b9be85abb
SHA256: 02ca84d14b3854d7ba49090756a3bdb85517003a04c19ecadd29de32089448a2
application/zip
65.13MB
2025-12-18 23:12:50 +0000 UTC
agent.gaming.apponfly.com · AppOnFlyGaming-win-Portable.zip

/

Czechia · CMIS s.r.o.

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 7305dfda77395914b2d0c9dd21c8fadcd77c8932
SHA256: 4c42e988a218a2982ac977a093fb1b119ad16e0b2cef179d8f02f7c925848373
application/zip
65.11MB
2025-11-18 11:12:08 +0000 UTC
agent.aofg.dev.cmis.cz · AppOnFlyGaming-win-Portable.zip

/

Czechia · CMIS s.r.o.

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b368528a6fe2a4eb722a4b464e48cdfa49a74c50
SHA256: f9b6ab827aa37bee6b41aeffe491e8ec24eced63f1f0cbd9ef0263c57bf71850
application/zip
65.12MB
2025-10-24 16:26:39 +0000 UTC
agent.gaming.apponfly.com · AppOnFlyGaming-win-Portable.zip

/

Czechia · CMIS s.r.o.

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 463ec0c8750629b0e9f5438710e7135e859f8d6d
SHA256: 64c377c640d678e79089c80a31143f49f854611701022e6fdcde4e1769c4f0ab
application/zip
65.12MB
2025-10-12 21:22:39 +0000 UTC