Files named script.ps1

45.79.167.143 · script.ps1

/

·

SHA1: dca75a77ff5833b8d6ef5944be396e337100f2a3
SHA256: eb25c71263e04dda90984bfb59c95c867197daed129639c49f4b604304252437
963.00B
2021-12-06 14:37:05 +0000 UTC
77.105.161.122 · script.ps1

/

Germany · Mykyta Skorobohatko

SHA1: ded341bc594ea16572abc13daed03b3c8c8ba510
SHA256: f233e01de76459b7fefffbc9aef5231f6548c900ec02364dde074525722079ab
427.00B
2025-12-06 16:31:37 +0000 UTC
185.190.140.188 · script.ps1

/vps/

France · Contabo GmbH

SHA1: 33c531777d52467a34050c859db07199fdc26c31
SHA256: 4568a2f199aab07e191a95a2fca93630de4104d5d7e1aba96863a4fab30280a7
292.00B
2025-07-04 10:12:38 +0000 UTC
77.105.161.122 · script.ps1

/

Germany · Mykyta Skorobohatko

SHA1: ded341bc594ea16572abc13daed03b3c8c8ba510
SHA256: f233e01de76459b7fefffbc9aef5231f6548c900ec02364dde074525722079ab
427.00B
2025-12-06 16:31:37 +0000 UTC
ftp-glpi.oca.eu · script.ps1

/Windows/Anydesk/

France · Renater

SHA1: 455ea1ef2575cc190c5e90297001a23f84616214
SHA256: 40f90284363a43e2b3ed757e4cb881a2b579d59a29bbf868a44396a03b68ef27
1.91KB
2024-04-11 10:14:04 +0000 UTC
share.lucamatei.com · script.ps1

/

Norway · Telia Norge AS

SHA1: 4794099463919387201fdc943c2a0deb6e7db915
SHA256: e125dc76441e36b6a218583a87cb19699494143dc6d48d28d15b8bdec0915467
application/octet-stream
3.37KB
2024-04-17 17:48:54 +0000 UTC
thecodersteam.com · script.ps1

/

· CLOUDFLARENET

SHA1: 83969d29dbf9b230800967a43c82ebcbbce3dc4d
SHA256: 8553ccf3d380e57ede5a22d26162e12e015ce74c134f1a709935b212effe1727
application/octet-stream
2.31KB
2025-10-08 00:15:13 +0000 UTC
share.lucamatei.com · script.ps1

/

Norway · Telia Norge AS

SHA1: 4794099463919387201fdc943c2a0deb6e7db915
SHA256: e125dc76441e36b6a218583a87cb19699494143dc6d48d28d15b8bdec0915467
application/octet-stream
3.37KB
2024-04-17 17:48:54 +0000 UTC
edu.techtrendo.com · script.ps1

//scripts/

Finland · Hetzner Online GmbH

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
gaukokhabar.com · script.ps1

//scripts/

Finland · Hetzner Online GmbH

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
www.new.theasalcnstruction.com.hicksopus.com · script.ps1

//scripts/

Finland · Hetzner Online GmbH

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
new.theasalcnstruction.com.hicksopus.com · script.ps1

//scripts/

Finland · Hetzner Online GmbH

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
share.lucamatei.com · script.ps1

/

Norway · Telia Norge AS

SHA1: 4794099463919387201fdc943c2a0deb6e7db915
SHA256: e125dc76441e36b6a218583a87cb19699494143dc6d48d28d15b8bdec0915467
application/octet-stream
3.37KB
2024-04-17 17:48:54 +0000 UTC
mail.birajshrestha.com.np · script.ps1

//scripts/

· CLOUDFLARENET

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
www.birajshrestha.com.np · script.ps1

//scripts/

Finland · Hetzner Online GmbH

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
nabinkhanal01.com.np · script.ps1

//scripts/

· CLOUDFLARENET

SHA1: 550b81030b6fd37f49adc3279ec26380dc546b21
SHA256: 6f655727e71ab39916fa4efb212ff969a937a3dd616fedc3a9e998ec695b9de0
application/octet-stream
2.89KB
2024-09-25 11:43:26 +0000 UTC
179.61.147.132 · script.ps1

/

Türkiye · KEYUBU Internet ve Bilisim Tic. Ltd. Sti.

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample
The password is "infected"

SHA1: 28b21ebe8d955659031e9637425b76e789850d57
SHA256: 941c25da1485a3795c739fe74e17876ec2a4a00d1d222677a978876a1faba657
4.09KB
2025-06-30 20:12:12 +0000 UTC
179.61.147.132 · script.ps1

/

Türkiye · KEYUBU Internet ve Bilisim Tic. Ltd. Sti.

Yara Disable_Defender From AbuseCH by iam-py-test

Download archived sample
The password is "infected"

SHA1: 28b21ebe8d955659031e9637425b76e789850d57
SHA256: 941c25da1485a3795c739fe74e17876ec2a4a00d1d222677a978876a1faba657
4.09KB
2025-06-30 20:12:12 +0000 UTC
script.hunvikran.com · script.ps1

/

· CLOUDFLARENET

SHA1: 54537d128cfce80aa529b277c004ef7a46a35367
SHA256: 8cd8340777bd54948251b50defe591f8e46326378f7c8c07f69c25bb9eb2e320
text/plain
5.95KB
2025-07-01 16:55:41 +0000 UTC
45.79.167.143 · script.ps1

/

United States · Akamai Connected Cloud

SHA1: dca75a77ff5833b8d6ef5944be396e337100f2a3
SHA256: eb25c71263e04dda90984bfb59c95c867197daed129639c49f4b604304252437
963.00B
2021-12-06 14:37:05 +0000 UTC