Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
https://drive.google[.]com/uc?id=1tvjir-olnzrljm5fybmk_hdjg9bv1zcy&export=download · URL · cyfar.ca
indicator
url
hxxps://drive[.]google[[.]]com/uc?id=1TVJir-OlNZrLjm5FyBMk_hDjG9BV1zCy&export=download
copy defanged
copy refanged (live)
First seen
2026-05-14
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
In-Memory Loader Drops ScreenConnect | ThreatLabz
Zscaler ThreatLabz
Google Drive URL used by PowerShell to download the C# source code payload (FileR.txt).
2026-05-13
