Files named wp-includes.zip

www.23858392-68-20180131042203.webstarterz.com · wp-includes.zip

/

Thailand · GMO-Z com NetDesign Holdings Co., Ltd.

SHA1: a6831072cb737bc98edd2af3dc54f175131350e8
SHA256: 407f2731190a2c5b65e5bcd4f7b161c5a708431b59ed516d6f17c3fcb3813270
application/zip
4.09MB
2020-01-21 07:43:52 +0000 UTC
www.23858392-68-20180131042203.webstarterz.com · wp-includes.zip

/

Thailand · GMO-Z com NetDesign Holdings Co., Ltd.

SHA1: a6831072cb737bc98edd2af3dc54f175131350e8
SHA256: 407f2731190a2c5b65e5bcd4f7b161c5a708431b59ed516d6f17c3fcb3813270
application/zip
4.09MB
2020-01-21 07:43:52 +0000 UTC
formularios.aauniv.com · wp-includes.zip

/archivos/

France · Contabo GmbH

SHA1: 7cf95405ae6bc0c55b43166dba35ec754d7e876b
SHA256: 72088b99d2c3e3a15cf4c5ac36f5a5befc62cf88e8e35e21048114212c139290
application/zip
10.51MB
2023-08-03 21:54:08 +0000 UTC
superseriema.com.br · wp-includes.zip

/54375/

United States · UNIFIEDLAYER-AS-1

SHA1: 239848b12486cba05320c4ddc8f0acff5b99096e
SHA256: 28a19d7ac0b12cca02c3d42a7ee604c3f4b3b2061ab409e9994f82e41208c9c6
application/zip
27.28KB
2025-12-02 20:42:27 +0000 UTC
superseriema.com.br · wp-includes.zip

/54375/

United States · UNIFIEDLAYER-AS-1

SHA1: 239848b12486cba05320c4ddc8f0acff5b99096e
SHA256: 28a19d7ac0b12cca02c3d42a7ee604c3f4b3b2061ab409e9994f82e41208c9c6
application/zip
27.28KB
2025-12-02 20:42:27 +0000 UTC
w3lab.co.in · wp-includes.zip

/Old Files/

India · DIGITALOCEAN-ASN

SHA1: d8a9c939af1a0ac5684eb164ebb9b13cc8fb3f02
SHA256: 76cf56eca25560402637bb5f2e3b89429ce76e60d73070433cc7ccd75944c6bd
application/zip
11.59MB
2024-07-07 12:11:56 +0000 UTC
w3lab.co.in · wp-includes.zip

/Old Files/

India · DIGITALOCEAN-ASN

SHA1: d8a9c939af1a0ac5684eb164ebb9b13cc8fb3f02
SHA256: 76cf56eca25560402637bb5f2e3b89429ce76e60d73070433cc7ccd75944c6bd
application/zip
11.59MB
2024-07-07 12:11:56 +0000 UTC
dfysalefunnel.com · wp-includes.zip

/

· CLOUDFLARENET

SHA1: e95749cd1c538d527656d4f84131e39a91dab2fc
SHA256: 649842ef4b4c03b55220017a57ae8a8221221c307ea991fd3e5253717cbc95cb
application/zip
12.01MB
2025-05-10 15:21:43 +0000 UTC
www.minyakgosokmbahmarto.com.rumahkarya.com · wp-includes.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: 90e194e976cc72573a5f5c86fd8ea94a3b91d1db
SHA256: b64dea5b80163510976ecdd66399f43d70ca9ba905f776b1927cf7c336c3498e
application/zip
49.12MB
2025-12-02 16:52:24 +0000 UTC
mail.minyakgosokmbahmarto.com · wp-includes.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: 90e194e976cc72573a5f5c86fd8ea94a3b91d1db
SHA256: b64dea5b80163510976ecdd66399f43d70ca9ba905f776b1927cf7c336c3498e
application/zip
49.12MB
2025-12-02 16:52:24 +0000 UTC
mail.minyakgosokmbahmarto.com · wp-includes.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: 90e194e976cc72573a5f5c86fd8ea94a3b91d1db
SHA256: b64dea5b80163510976ecdd66399f43d70ca9ba905f776b1927cf7c336c3498e
application/zip
49.12MB
2025-12-02 16:52:24 +0000 UTC
www.minyakgosokmbahmarto.com.rumahkarya.com · wp-includes.zip

/

Indonesia · CV. Rumahweb Indonesia

SHA1: 90e194e976cc72573a5f5c86fd8ea94a3b91d1db
SHA256: b64dea5b80163510976ecdd66399f43d70ca9ba905f776b1927cf7c336c3498e
application/zip
49.12MB
2025-12-02 16:52:24 +0000 UTC
constructii.hogas.ro · wp-includes.zip

/

Romania · Data Node Srl

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 5d2e88a0ac1e8a65d8af606a92328ef65f771065
SHA256: 35a67581052c19c75dffedd751ff2014364accb73292b77f088dc093ca460eb3
application/zip
49.13MB
2025-11-29 21:14:43 +0000 UTC
www.constructii.hogas.ro · wp-includes.zip

/

Romania · Data Node Srl

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 5d2e88a0ac1e8a65d8af606a92328ef65f771065
SHA256: 35a67581052c19c75dffedd751ff2014364accb73292b77f088dc093ca460eb3
application/zip
49.13MB
2025-11-29 21:14:43 +0000 UTC
www.constructii.hogas.ro · wp-includes.zip

/

Romania · Data Node Srl

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 5d2e88a0ac1e8a65d8af606a92328ef65f771065
SHA256: 35a67581052c19c75dffedd751ff2014364accb73292b77f088dc093ca460eb3
application/zip
49.13MB
2025-11-29 21:14:43 +0000 UTC
constructii.hogas.ro · wp-includes.zip

/

Romania · Data Node Srl

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 5d2e88a0ac1e8a65d8af606a92328ef65f771065
SHA256: 35a67581052c19c75dffedd751ff2014364accb73292b77f088dc093ca460eb3
application/zip
49.13MB
2025-11-29 21:14:43 +0000 UTC
eynakforoshionline.ir · wp-includes.zip

/

Finland · Hetzner Online GmbH

SHA1: 04ce9c49eb969ef59b341bb26dc882434578fdad
SHA256: d10e3dbcc76db014b123da968d58ee538439da5adf2209487c14dcab26468636
application/zip
10.79MB
2025-10-17 09:09:58 +0000 UTC
eynakforoshionline.ir · wp-includes.zip

/

Finland · Hetzner Online GmbH

SHA1: 04ce9c49eb969ef59b341bb26dc882434578fdad
SHA256: d10e3dbcc76db014b123da968d58ee538439da5adf2209487c14dcab26468636
application/zip
10.79MB
2025-10-17 09:09:58 +0000 UTC
develop1.webstudiopanama.com · wp-includes.zip

//lagunadev/

Germany · Hetzner Online GmbH

SHA1: 09c6cf43ab6d95dfa3b7eafe2a3e2814724fa574
SHA256: c3f2b97ea9f002a2007155e75ab3d8576d6e36f7b536b40e1bfe4ae77c970d28
application/zip
9.29MB
2021-06-08 13:48:26 +0000 UTC
www.vtsnis.rs · wp-includes.zip

/

The Netherlands · LeaseWeb Netherlands B.V.

SHA1: 81917fce79453f203e37a4959556caa84801a826
SHA256: e7fbd9b21f5438ec83eb63fadae4655ca55f56adf10e8358a22b76e91f0f1a1e
application/zip
11.38MB
2024-08-20 18:48:43 +0000 UTC