🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for https://93.152.209.8:9445/clickfix/AYN9iXh1hl/file which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:4058582
URL: https://93.152.209.8:9445/clickfix/AYN9iXh1hl/file
URL Status:flame Online (spreading malware for 4 days, 10 hours, 13 minutes)
Host: 93.152.209.8
Date added:2026-11-06 19:09:12 UTC
Threat:Malware download Malware download
Reporter: quietheronsec
Abuse complaint sent (?): Yes (2026-11-06 19:10:20 UTC to abuse{at}dedik[dot]io)
Tags:ClickFix hhunter msi PluginDex zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-11-10svv.zipzip a313e84aa8b7805f9da4c9b75a95bbdeb72faf7b2de4ad1a79bf667e53067dc2n/a 
2026-11-08svv.zipzip 9ce5352b8e507d096ce3906f783abfa68c2b35672a4227f9c76333d662bbececn/a 
2026-11-07svv.zipzip 4fdc7e810a460a5d506cc1958fa4cbec56acdbd0b1ead8e706b9b4c4e0e94414n/a 
2026-11-06svv.zipzip e57fe10b4498fdb7786e1fd6bc46b7d5ca0f45c26d363be418d3b2c79fb013d2n/a