Files named MonSound6.uax.zip

updater.l2satory.com · MonSound6.uax.zip

Russia · Uniontel Ltd

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 894ea287e24cbfffa59a89dddc9261e8ca041ee2
SHA256: 0e11741be0389c94aba47c65f2ac76a627b0ad51ba9c7b7be34310a4ce72d8f3
application/zip
37.10MB
2024-11-30 20:55:24 +0000 UTC

europvp-files.com · MonSound6.uax.zip

/updater/client/Euro-PvP_Client_ru_en/sounds/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: b399e4adf63bf0fd2b5b45b54109566993dee0c3
SHA256: 49662c08e5ecee028c4d1319bbcaff826992d390acc52011a00b5c7b9f6fa73f
application/zip
16.79MB
2025-06-10 06:37:48 +0000 UTC

files.cdnessence.net · MonSound6.uax.zip

/essenceClient/essenceClient/Sounds/

Russia · NetCrafters OU

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 6311aec2a8d0bf2b117cd2f00106e30038c5d56a
SHA256: eb768af14d5f36d3a1e9c2ae35e6c7fdb92123c6aa7a5e6d1ac30ab8eb8c9b7e
application/zip
41.91MB
2025-12-10 23:01:04 +0000 UTC

updasfjnsjkafas.viranium.com · MonSound6.uax.zip

/upd/client/Sounds/

Seychelles · Alsycon B.V.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: c98878148399e7e3e14860b704686f525c679193
SHA256: 593426b3db10a31f620aefdb0fb9325058e515506926d51a3a380a50f75479e6
application/zip
40.78MB
2026-10-21 13:39:51 +0000 UTC

cdn.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC

152.53.152.54 · MonSound6.uax.zip

/zips/Sounds/

Germany · netcup GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 67a469d47b17edc627752ec2c031e75a8cf99456
SHA256: b14bb269b1f0db74d6d90f6df3420374f8bdbe25267b123e28242c674862e1fb
application/zip
37.11MB
2026-04-05 19:37:33 +0000 UTC

145.239.82.166 · MonSound6.uax.zip

/sounds/

Poland · OVH SAS

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 3a41328686321ea942291b819587d53e8357a7ef
SHA256: 9fe0e29cea3225ba169b74c80cddb4f8462cfaddfcf10bc889b98f77625f81f4
application/zip
17.60MB
2026-06-29 17:29:12 +0000 UTC

cjkk.site · MonSound6.uax.zip

/orbis/interlude/sounds/

Germany · Hetzner Online GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 6d6efb91712710f62feb5f5e803c9df5c44e4b94
SHA256: b35e3db45c3ac1617cca038edc88943267bd214282969577c675a81074b51b7c
application/zip
17.60MB
2026-03-11 17:24:29 +0000 UTC

cjkk.site · MonSound6.uax.zip

/orbis/classic/Sounds/

Germany · Hetzner Online GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 9a6d4d843ee4d9eb06991a667410d054789bfd05
SHA256: be69477d0c6766b6d39e57d7bb330ce195a44c412104b767109f7568179ad831
application/zip
38.75MB
2026-03-16 22:15:39 +0000 UTC

cjkk.site · MonSound6.uax.zip

/l2meta/updater/sounds/

Germany · Hetzner Online GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC

europvp-files.com · MonSound6.uax.zip

/updater/clientclassic/EuroPvP_Client_Classic/Sounds/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 1c8b624fbb9d7d410718d3b9a1dea1697d48669e
SHA256: 2cc11b5bfdc1620067d8559abb6331445b47ab2eb77d21f2ab5cfc06a01099fc
application/zip
37.13MB
2025-06-10 10:16:54 +0000 UTC

europvp-files.com · MonSound6.uax.zip

/updater/client/Euro-PvP_Client_ru_en/sounds/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: b399e4adf63bf0fd2b5b45b54109566993dee0c3
SHA256: 49662c08e5ecee028c4d1319bbcaff826992d390acc52011a00b5c7b9f6fa73f
application/zip
16.79MB
2025-06-10 06:37:48 +0000 UTC

files.cdnessence.net · MonSound6.uax.zip

/essenceClient/essenceClient/Sounds/

Russia · NetCrafters OU

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 6311aec2a8d0bf2b117cd2f00106e30038c5d56a
SHA256: eb768af14d5f36d3a1e9c2ae35e6c7fdb92123c6aa7a5e6d1ac30ab8eb8c9b7e
application/zip
41.91MB
2025-12-10 23:01:04 +0000 UTC

cdn-ru.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

Russia · Jsc timeweb

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 02:59:15 +0000 UTC

cdn.revany.net · MonSound6.uax.zip

/orbis/interlude/sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 6d6efb91712710f62feb5f5e803c9df5c44e4b94
SHA256: b35e3db45c3ac1617cca038edc88943267bd214282969577c675a81074b51b7c
application/zip
17.60MB
2026-03-11 17:24:29 +0000 UTC

cdn.revany.net · MonSound6.uax.zip

/orbis/classic/Sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 9a6d4d843ee4d9eb06991a667410d054789bfd05
SHA256: be69477d0c6766b6d39e57d7bb330ce195a44c412104b767109f7568179ad831
application/zip
38.75MB
2026-03-16 22:15:39 +0000 UTC

cdn.revany.net · MonSound6.uax.zip

/l2meta/updater/sounds/

United Kingdom · Tempest Hosting, LLC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 0b5337b0fa0d30695505b29cbfc09c029f7fa1df
SHA256: 1fa7c42d0661cfdddd70c2602a0e5cfcb02c2452635b78bcfb227620a5fbfeff
application/zip
17.60MB
2026-03-16 01:58:38 +0000 UTC