File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • 200.73.116.133 · x.ps1

    /

    Chile · PowerHost Telecom SPA

    Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f8159b9603480ebab47b8294e051a86f6fb20ba6
    SHA256: 919f52d62c921983799b027fcfa598525437f83069ea5947ec0610a814c053e6
    application/octet-stream
    791.00B
    2024-09-04 08:02:01 +0000 UTC

  • 200.73.116.133 · x.ps1

    /

    Chile · PowerHost Telecom SPA

    Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f8159b9603480ebab47b8294e051a86f6fb20ba6
    SHA256: 919f52d62c921983799b027fcfa598525437f83069ea5947ec0610a814c053e6
    application/octet-stream
    791.00B
    2024-09-04 08:02:01 +0000 UTC

  • 200.73.116.133 · x.ps1

    /

    Chile · PowerHost Telecom SPA

    Yara HKTL_Nishang_PS1_Invoke_PowerShellTcpOneLine From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f8159b9603480ebab47b8294e051a86f6fb20ba6
    SHA256: 919f52d62c921983799b027fcfa598525437f83069ea5947ec0610a814c053e6
    application/octet-stream
    791.00B
    2024-09-04 08:02:01 +0000 UTC

  • 65.21.198.54 · x.ps1

    /server/

    Finland · Hetzner Online GmbH

    SHA1: 364f17ba1b85e4c903157cb8a897f35fa48e73b7
    SHA256: 66b3309146e34ae971ff0b5933d2392c9016ea8c8fef2b41b66bb11f6dd84acf
    757.94KB
    2022-03-02 00:17:50 +0000 UTC