Files named backend.zip

developerpolash.xyz · backend.zip

/

Singapore · Flarezen Ltd.

SHA1: f7c02d2a6c0b084d1e1375be20dd0d66b20ad1c3
SHA256: 35200997979db2ae52a91140e9cb5ba21c9d27994dd829f2e26fbd62a920ab7b
application/zip
47.33MB
2026-01-13 07:23:08 +0000 UTC
agile.kogistate.gov.ng · backend.zip

/

United States · Oracle Corporation

SHA1: 79437fa702d1ee428d8411782a5e2720ce2bbb6b
SHA256: 450211ce929698e3b29466a62c998d7c350251be4d4c1341993f8691f4417e4a
application/zip
4.89MB
2024-11-14 03:40:34 +0000 UTC
agile.kogistate.gov.ng · backend.zip

/

United States · Oracle Corporation

SHA1: 79437fa702d1ee428d8411782a5e2720ce2bbb6b
SHA256: 450211ce929698e3b29466a62c998d7c350251be4d4c1341993f8691f4417e4a
application/zip
4.89MB
2024-11-14 03:40:34 +0000 UTC
www.v2.affix-stay-ride.com · backend.zip

/

Kenya · Truehost Cloud Limited

SHA1: 6a847e98b849fae2420acf38366aa94d946f2259
SHA256: 7035ab7e490a31894e3c677e01fcca85aa417ce90bd8db1f82c584c42f9277e0
application/zip
228.00KB
2026-01-07 12:41:40 +0000 UTC
punjabimandi.com · backend.zip

/api/backups-02-11-2026/

Canada · StormWeb Canada Hosting Inc.

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: cfafc1f88c1e2f2b2df44ed546962428dfdbbe93
SHA256: f84ae7825cb05b64b175dc6ea148770979d5a5bea7e9019962a1049b1825da14
application/zip
31.41MB
2026-11-01 22:11:44 +0000 UTC
punjabimandi.com · backend.zip

/api/backups-02-11-2026/

Canada · StormWeb Canada Hosting Inc.

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: fe9cfffa6c7c503b28d5c6ac290facea29a2916b
SHA256: 5cf5423288a85d001db2f9a568f812ef82b535f95bb6072ad7f6dd8f8e47f083
application/zip
31.41MB
2026-11-01 22:11:44 +0000 UTC
www.maptn.yottat.com · backend.zip

/

France · O2switch SAS

SHA1: ce99f3bc5d48fee2d942b55018f1bff5bea2ecdc
SHA256: 7153bee523a0e169bcf40d320946d4a103e2ceccede93631ead56f42e021bdf1
application/zip
37.55KB
2025-01-05 00:09:20 +0000 UTC
maptn.yottat.com · backend.zip

/

France · O2switch SAS

SHA1: ce99f3bc5d48fee2d942b55018f1bff5bea2ecdc
SHA256: 7153bee523a0e169bcf40d320946d4a103e2ceccede93631ead56f42e021bdf1
application/zip
37.55KB
2025-01-05 00:09:20 +0000 UTC
www.warungkite.e-masjid-digital.cloud · backend.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: a7ced5d35ae26cef4ddf0dca3cc7544feced4005
SHA256: 924b4cc386555efb92f47ea1051907564d3d0fa87cb7a7d63e7dae857d41d7e7
application/zip
207.72KB
2026-04-07 04:27:33 +0000 UTC
warungkite.e-masjid-digital.cloud · backend.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: a7ced5d35ae26cef4ddf0dca3cc7544feced4005
SHA256: 924b4cc386555efb92f47ea1051907564d3d0fa87cb7a7d63e7dae857d41d7e7
application/zip
207.72KB
2026-04-07 04:27:33 +0000 UTC
www.warungkite.e-masjid-digital.cloud · backend.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: a7ced5d35ae26cef4ddf0dca3cc7544feced4005
SHA256: 924b4cc386555efb92f47ea1051907564d3d0fa87cb7a7d63e7dae857d41d7e7
application/zip
207.72KB
2026-04-07 04:27:33 +0000 UTC
warungkite.e-masjid-digital.cloud · backend.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: a7ced5d35ae26cef4ddf0dca3cc7544feced4005
SHA256: 924b4cc386555efb92f47ea1051907564d3d0fa87cb7a7d63e7dae857d41d7e7
application/zip
207.72KB
2026-04-07 04:27:33 +0000 UTC
demo.jahndumunda.com · backend.zip

/

Bangladesh · ColoCone

SHA1: 8d0a30933b15f9e3b7b787e272a7506862f7e86e
SHA256: 4ae677cddb743e4bace014938488011b62bc7a7d39326f6d7837e867db3e31bd
application/zip
50.54MB
2026-11-09 20:36:09 +0000 UTC
www.demo.jahndumunda.com · backend.zip

/

Bangladesh · ColoCone

SHA1: 48186dfe71af85e281c4c8872aaa5dbecc7f8157
SHA256: ab028f0eb5625c6ce956d43df4a166ebe321c5d55dbe9f525c708c5e50ef66f0
application/zip
50.54MB
2026-11-09 20:36:09 +0000 UTC
admin.alajo.ng · backend.zip

/

United Kingdom · UK Dedicated Servers Limited

SHA1: 48bac4812c7197245d5e872b2e97a8938c0848c0
SHA256: 5c7f9ca4a6302c2136e086dc718930082bfbb3bd82b9d1951c1841bbee4518d9
application/zip
57.36MB
2025-11-24 17:18:17 +0000 UTC
admin.alajo.ng · backend.zip

/

United Kingdom · UK Dedicated Servers Limited

SHA1: 48bac4812c7197245d5e872b2e97a8938c0848c0
SHA256: 5c7f9ca4a6302c2136e086dc718930082bfbb3bd82b9d1951c1841bbee4518d9
application/zip
57.36MB
2025-11-24 17:18:17 +0000 UTC
www.admin.alajo.ng · backend.zip

/

United Kingdom · UK Dedicated Servers Limited

SHA1: 48bac4812c7197245d5e872b2e97a8938c0848c0
SHA256: 5c7f9ca4a6302c2136e086dc718930082bfbb3bd82b9d1951c1841bbee4518d9
application/zip
57.36MB
2025-11-24 17:18:17 +0000 UTC
www.admin.alajo.ng · backend.zip

/

United Kingdom · UK Dedicated Servers Limited

SHA1: 48bac4812c7197245d5e872b2e97a8938c0848c0
SHA256: 5c7f9ca4a6302c2136e086dc718930082bfbb3bd82b9d1951c1841bbee4518d9
application/zip
57.36MB
2025-11-24 17:18:17 +0000 UTC
it.soldig-apaza.com · backend.zip

/

United States · Akamai Connected Cloud

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 08e219599a238767dc1f2e380905e123ab7547d7
SHA256: 0c10a7d96aa1beb670e9d16187b98a7d8c7333e539386b25c4cf845e341b9a6d
application/zip
21.00MB
2026-11-12 01:54:32 +0000 UTC
it.soldig-apaza.com · backend.zip

/

United States · Akamai Connected Cloud

Yara Suspicious_PowerShell_WebDownload_1 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 08e219599a238767dc1f2e380905e123ab7547d7
SHA256: 0c10a7d96aa1beb670e9d16187b98a7d8c7333e539386b25c4cf845e341b9a6d
application/zip
21.00MB
2026-11-12 01:54:32 +0000 UTC