Malware Research

31 August 2026 21:04

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: SAM
User ID: 7699912621
Reason: None given.

Malware Research

31 August 2026 14:56

One thing I value in a malware write-up is stating what was not observed as well as what was found. ‘No persistence seen in this check’ is more useful than a vague clean verdict. It keeps a quick triage note from becoming a conclusion by accident.

Malware Research

31 August 2026 12:03

Share the exact alert text, operating system and what changed just before the issue. A hash helps with a suspicious file, while a short timeline helps if it is an account or network problem. That gives people something they can reproduce or rule out.

Malware Research

30 August 2026 08:01

New FedBan
Fed: Libra's Empire
FedAdmin: ❤🦦
User: Michael
User ID: 8533768835
Reason: scam

Malware Research

29 August 2026 08:05

For an old SWF, I would use a disposable VM with controlled networking before opening it. Historical assets can be useful evidence and terrible things to double-click on a main machine.

Malware Research

28 August 2026 15:54

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: yefan
User ID: 8563922981
Reason: None given.

Malware Research

28 August 2026 12:11

cdnvideo-td . socapp. net /td-vk/published/tools/td_editor.swf

Malware Research

28 August 2026 09:12

it may exist partially - https://archive.org/details/desktop-tower-defence_flash

probably do a search there, browse through various collections

Malware Research

28 August 2026 09:07

you will have to try elsewhere

Malware Research

28 August 2026 09:06

Yes, I found the old build structure on it, unfortunately, Alexa crawlers could theoretically save all the game files, but they didn't because of the budget.

Malware Research

28 August 2026 09:04

I also have a domain where the game was tested during development: soctower . pershastudia . com

Domain of the old cdn server: cdnvideo-td . socapp. net

Malware Research

28 August 2026 09:01

I have a build structure from a snapshot of an old cdn server:

battle/       — attackers/, defenders/, abilities/, background/, grid/, maps/, paddle/, vfx/, common.swf
  builder/      — hud/, map/
  common/       — cursors.swf, hud.swf, preloader.swf
  css/          — snc.css
  fonts/        — WG_BOMGcom001.swf, WG_DSGoose.swf, WG_LuckiestGuy.swf, WG_PFPlayskoolPro-Regular.swf
  hud/          — tooltips.swf, windows.swf
  icons/        — attackers/, defenders/, abilities/, buildings/, missions/, quests/, recipes/, slots/, viral/, attackers.swf, monetization.png
  prod1/
  resources/    — resources.swf
  sounds/       — music/, sfx/
  tools/        — location_editor.swf, td_editor.swf
  tutorial/     — comics.swf, tutorial.swf

Malware Research

28 August 2026 07:30

Those names alone will be hard to search reliably. If you can recover the old game domain, a former client URL, or any asset path from screenshots, that should make archive and intelligence searches far more precise.

Malware Research

27 August 2026 18:30

Please provide a hash or something that's easily searched

Malware Research

27 August 2026 15:15

Hi! I am engaged in reverse engineering and restoration of closed browser games. I'm trying to find a client (.swf) of an old VKontakte game (2012-2014) for writing a server. Can you tell me if someone with access to VT Intelligence can check if it's still there?
I have the names of the files.

Malware Research

31 August 2026 16:01

no persistency doesn't mean it's not a malware, some malware doesn't have persistency

having persistency doesn't prove it's malware either, many legitimate software install persistency for various reasons, such as dependencies, user-friendliness, regular updates, etc

the conclusion from the triage shouldn't be derived from a lack or presence of persistency

Malware Research

31 August 2026 14:07

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: luna
User ID: 8884330517
Reason: None given.

Malware Research

31 August 2026 08:53

I faced some problem

Malware Research

29 August 2026 20:03

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: 裸聊1🖤V🍀🎯1 千😺女可=选😻
User ID: 1283124946
Reason: None given.

Malware Research

29 August 2026 04:51

New FedBan
Fed: Libra's Empire
FedAdmin: ❤🦦
User: Silverqueen
User ID: 7692841133
Reason: illegal activity

Malware Research

28 August 2026 15:54

/fban @SDlpkgvDIdMFcb

Malware Research

28 August 2026 12:09

The full CDN hostname plus paths such as /tools/td_editor.swf should make archive searches much more precise. I would search the hostname together with two distinctive paths, then use any recovered asset URL to pivot to nearby files.

Malware Research

28 August 2026 09:07

Thanks for your help, do you have any ideas where else to look?

Malware Research

28 August 2026 09:07

based on the structure, I don't think it's on Virustotal

Malware Research

28 August 2026 09:05

interestingly, Wayback Machine didn't archive the most important things

Malware Research

28 August 2026 09:02

I have several domains, but the bot deletes them when I send them here.

Malware Research

28 August 2026 08:51

TD_Defender.swf - not found
td_editor.swf - not found

remaining 4 - too many on Virustotal to know which is the correct one

Malware Research

27 August 2026 18:32

Name files:
TD_Defender.swf (Main file, entry point)

Other:
td_editor.swf
comics.swf
windows.swf
tooltips.swf
attackers.swf

Malware Research

27 August 2026 15:52

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: Nikita Laz
User ID: 8855429986
Reason: None given.

Malware Research

27 August 2026 14:05

New FedBan
Fed: Libra's Empire
FedAdmin: alex 27
User: xiangshi
User ID: 8986545794
Reason: None given.