Loading threats
Invokes the downloader function with a remote URL and a Windows file path (C:\exiles.exe), retrieving the exiles.exe payload and writing it to disk via the UDF.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 78.189.99.101 | 100% | 4,427 | 4,427 | 🇹🇷 TR | AS9121 | 2026-04-11 |
| 211.194.28.203 | 100% | 3,283 | 3,280 | 🇰🇷 KR | AS4766 | 2026-04-07 |
| 211.198.197.93 | 100% | 1,325 | 1,325 | 🇰🇷 KR | AS4766 | 2026-04-11 |
| 117.139.231.194 | 100% | 301 | 301 | 🇨🇳 CN | AS9808 | 2026-04-01 |
| 183.202.131.130 | 100% | 203 | 203 | 🇨🇳 CN | AS56042 | 2026-04-07 |
| 111.52.91.47 | 100% | 136 | 136 | 🇨🇳 CN | AS56042 | 2026-03-22 |
| 183.200.4.221 | 100% | 108 | 108 | 🇨🇳 CN | AS56042 | 2026-03-30 |
| 183.202.141.184 | 72% | 6 | 6 | 🇨🇳 CN | AS56042 | 2026-03-18 |