File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • cof.tryhackme.fun · viyuh-file-analysis-tests.zip

    /testing/

    India · BHARAT DATACENTER

    Yara SUSP_Archive_Phishing_Attachment_Characteristics_Jun22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 8513ef2078e491884f8bd32734b7f565b61b13b8
    SHA256: 95fb8bbb59340b9d12620a300f413ff50ff5242eadc544c2a5ae9be4ac0982b4
    application/zip
    9.32KB
    2026-07-17 04:52:40 +0000 UTC

  • 185.117.89.70 · pdf-viewer.zip

    /

    Sweden · HZ Hosting Ltd

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 39b51bb867bf24a8079dad58fcc7aa88dc2a9e1b
    SHA256: 93f5085622f5bef73d3c4d37f16465c295c63fe12f610caabaacabe91347bfaf
    application/zip
    1.15MB
    2026-10-01 12:34:30 +0000 UTC

  • 185.117.89.70 · pdf-view.pdf.zip

    /

    Sweden · HZ Hosting Ltd

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 7592d001c89eb083db5395b801b2c3f702fcc10e
    SHA256: 4e6687827c30b9b51afcb2e6261456740df77c0ad199004a5b7cc6c2b4196533
    application/zip
    1.05MB
    2026-10-01 12:03:31 +0000 UTC

  • 185.117.89.70 · PdfReport2026-sfx.pdf.zip

    /

    Sweden · HZ Hosting Ltd

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: cdf2108f91adf283ed90af18a65da50c8be1d1ae
    SHA256: 714087ac99f11563da46da6ad93bbfbc79e5b4b791dc9993027acd04955b3c25
    application/zip
    325.34KB
    2026-09-25 19:33:06 +0000 UTC

  • 185.117.89.70 · PdfReport2026-sfx.pdf.exe

    /

    Sweden · HZ Hosting Ltd

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: c12b5db50d889ae39bbf0ed3ba91db605da8e5ea
    SHA256: 1c9320fdf6725fe14495da5b2c0d060946cd6198fd85a8c8791bd848b3173e65
    application/octet-stream
    931.37KB
    2026-09-25 19:32:08 +0000 UTC

  • www.host.provisia.net · asduhasjdhfkajshdkfjahskdfjhaskd.tar.gz

    /

    United States · Amazon.com, Inc.

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e5e61461fd938aa7786bc4c6b7f56e205bc1813d
    SHA256: 22599cffcede37ccc9fefb085d7e0a0a0dd377cc7aa749f7551663917d3bd81b
    application/x-gzip
    233.93KB
    2017-03-21 23:12:58 +0000 UTC

  • www.security.provisia.net · asduhasjdhfkajshdkfjahskdfjhaskd.tar.gz

    /

    United States · Amazon.com, Inc.

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e5e61461fd938aa7786bc4c6b7f56e205bc1813d
    SHA256: 22599cffcede37ccc9fefb085d7e0a0a0dd377cc7aa749f7551663917d3bd81b
    application/x-gzip
    233.93KB
    2017-03-21 23:12:58 +0000 UTC

  • www.security.provisia.net · asduhasjdhfkajshdkfjahskdfjhaskd.tar.gz

    /

    United States · Amazon.com, Inc.

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e5e61461fd938aa7786bc4c6b7f56e205bc1813d
    SHA256: 22599cffcede37ccc9fefb085d7e0a0a0dd377cc7aa749f7551663917d3bd81b
    application/x-gzip
    233.93KB
    2017-03-21 23:12:58 +0000 UTC

  • www.security.provisia.net · asduhasjdhfkajshdkfjahskdfjhaskd.tar.gz

    /

    United States · Amazon.com, Inc.

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e5e61461fd938aa7786bc4c6b7f56e205bc1813d
    SHA256: 22599cffcede37ccc9fefb085d7e0a0a0dd377cc7aa749f7551663917d3bd81b
    application/x-gzip
    233.93KB
    2017-03-21 23:12:58 +0000 UTC

  • www.security.provisia.net · asduhasjdhfkajshdkfjahskdfjhaskd.tar.gz

    /

    United States · Amazon.com, Inc.

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e5e61461fd938aa7786bc4c6b7f56e205bc1813d
    SHA256: 22599cffcede37ccc9fefb085d7e0a0a0dd377cc7aa749f7551663917d3bd81b
    application/x-gzip
    233.93KB
    2017-03-21 23:12:58 +0000 UTC

  • files.borukh.net · Sumatra.PDF.exe

    /downloads/sys/

    Ukraine · PE Sinenko Vitaliy Mihailovich

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: eeeef64dddd9c924f7784927d7df125c847bde37
    SHA256: 559847931bf20a5fe234e7c1f1e97c73ea7b609489ebdd1efcabb48397d18f8f
    text/plain
    12.09MB
    2024-03-18 21:00:00 +0000 UTC

  • docs.ludost.net · GP1 - Lecture Lesson 01.zip

    /Programming and Software Development/Game Development_Dr.7shad/Basics/3_Game Engine/Gameinstitute.com - Game Engine Development Course/Graphics Programming Directx9 Module1/Lesson 1 - 3D Graphics Fundamentals I/Lecture/

    Bulgaria · Civil association Init Lab

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f5258a63ab3d5b628415950e93f0093dbf20bef5
    SHA256: 3899cfcde8d61c6333dbb02a4dd3973faaafc862d32a82381311b6d41e317225
    application/zip
    44.66MB
    2011-11-30 07:19:50 +0000 UTC

  • docs.ludost.net · CPP2 - Lecture Lesson 01.zip

    /Programming and Software Development/Game Development_Dr.7shad/Basics/3_Game Engine/Gameinstitute.com - Game Engine Development Course/C++ Module1 and Module2/

    Bulgaria · Civil association Init Lab

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 071c16980a4c329c70563a1f5d1ae829b4539bc8
    SHA256: 2b5739fa004fb674a8d4fb8856999216a305d421fe340f4a787f52808b0b2e96
    application/zip
    12.64MB
    2011-11-30 07:12:00 +0000 UTC

  • docs.ludost.net · CPP1 - Lecture Lesson 01.zip

    /Programming and Software Development/Game Development_Dr.7shad/Basics/3_Game Engine/Gameinstitute.com - Game Engine Development Course/C++ Module1 and Module2/

    Bulgaria · Civil association Init Lab

    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 41bf295b185709906b9301162fec46b9533e991c
    SHA256: fa4d864f687ae1f32f90eb2f28a4e9f0e66a5453ee7e854e70caecdb01216ee5
    application/zip
    27.50MB
    2011-11-30 07:11:53 +0000 UTC

  • mail.reveantivirus.com · Malware Samples.zip

    /reveantivirus.com/linux/Builds/Abhishek_Samples/

    United States · IO INC

    Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen
    Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth
    Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Yara detect_Redline_Stealer From AbuseCH by Varp0s
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen
    Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs
    Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen
    Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)
    Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro
    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen
    Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp
    Yara IMPLANT_4_v7 From Florian Roth by US CERT
    Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen
    Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)
    Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen
    Yara Win32_Ransomware_CryptoJoker From ReversingLabs by ReversingLabs
    Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)
    Yara Cloaked_RAR_File From Florian Roth by Florian Roth (Nextron Systems)
    Yara Office_as_MHTML From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)
    Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)
    Yara connectback2_pl From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

    SHA1: 4c4df2f3aad5f50efafe9a2c061cb81e224c723b
    SHA256: e823d185ab9b6c85e47a4c45ea3396b00963c31b91058958f70123fc0233efd6
    application/zip
    1.29GB
    2018-06-21 08:03:32 +0000 UTC

  • mail.reveantivirus.com · Malware Samples.zip

    /reveantivirus.com/linux/Builds/Abhishek_Samples/

    United States · IO INC

    Yara INDICATOR_EXE_Packed_Dotfuscator From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen
    Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth
    Yara INDICATOR_EXE_Packed_ConfuserEx From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Yara detect_Redline_Stealer From AbuseCH by Varp0s
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara INDICATOR_EXE_Packed_RLPack From AlienVault by ditekSHen
    Yara Win32_Ransomware_WannaCry From ReversingLabs by ReversingLabs
    Yara INDICATOR_EXE_Packed_SmartAssembly From AlienVault by ditekSHen
    Yara Nanocore_RAT_Gen_2 From Florian Roth by Florian Roth (Nextron Systems)
    Yara IronTiger_Gh0stRAT_variant From Florian Roth by Cyber Safety Solutions, Trend Micro
    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_AgileDotNet From AlienVault by ditekSHen
    Yara SUSP_NET_NAME_ConfuserEx From Florian Roth by Arnim Rupp
    Yara IMPLANT_4_v7 From Florian Roth by US CERT
    Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen
    Yara INDICATOR_EXE_Packed_Goliath From AlienVault by ditekSHen
    Yara Typical_Malware_String_Transforms From Florian Roth by Florian Roth (Nextron Systems)
    Yara INDICATOR_EXE_Packed_aPLib From AlienVault by ditekSHen
    Yara Win32_Ransomware_CryptoJoker From ReversingLabs by ReversingLabs
    Yara SUSP_XORed_Mozilla From Florian Roth by Florian Roth (Nextron Systems)
    Yara Cloaked_RAR_File From Florian Roth by Florian Roth (Nextron Systems)
    Yara Office_as_MHTML From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXE_extension_cloaking From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)
    Yara FeliksPack3___PHP_Shells_ssh From Florian Roth by Florian Roth (Nextron Systems)
    Yara connectback2_pl From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

    SHA1: ef373b19cdefa52b7fc5e28b08f5ae3039cd2945
    SHA256: 9cc711df3bab6d62cf4cdf849e01e9f8e757644c9a419364186603efa4fead21
    application/zip
    1.29GB
    2018-06-21 08:03:32 +0000 UTC