File search engine

files.djinn.ru · GFX-Win10_Win11-101.1999.zip

/drivers/Xiaomi/Mini PC/Xiaomi Mini PC 2022 на Intel Core i5 1240P/

Russia · JSC Ufanet

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: c587cb91745c2c46e07abefb923904aa553f752e
SHA256: e12eaf758913697320a7ee15853f2a3f01257978b3476523d68e7c8bc56d31a2
application/zip
619.70MB
2024-04-27 15:34:00 +0000 UTC
ftp.adlab.ru · win-acme.v2.1.10.896.x64.pluggable.zip

/Temp/

Russia · MTS PJSC

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: be645e05d0ebbde9f2abfeb38aea123678e489e0
SHA256: f1b39aa3b6fa330f52548de926b104bcb44ee2a862ab154c1e5a699c9d8327b3
application/zip
32.75MB
2020-09-08 03:02:52 +0000 UTC
files.adlab.ru · win-acme.v2.1.10.896.x64.pluggable.zip

/Temp/

Russia · MTS PJSC

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: be645e05d0ebbde9f2abfeb38aea123678e489e0
SHA256: f1b39aa3b6fa330f52548de926b104bcb44ee2a862ab154c1e5a699c9d8327b3
application/zip
32.75MB
2020-09-08 03:02:52 +0000 UTC
storage.boxup.org · Whitelist-Oct-23.zip

/equemr/

United States · HOSTHATCH

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: caecbd4253922bae59bdeebb4150ff9c635c7b45
SHA256: 39fcd7a42347de3dda7b808f691e264e966d037fa996d4062823deee154f1d06
application/zip
127.45MB
2024-11-14 15:57:00 +0000 UTC
storage.boxup.org · Whitelist-Oct-23.zip

/equemr/

United States · HOSTHATCH

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: caecbd4253922bae59bdeebb4150ff9c635c7b45
SHA256: 39fcd7a42347de3dda7b808f691e264e966d037fa996d4062823deee154f1d06
application/zip
127.45MB
2024-11-14 15:57:00 +0000 UTC
dtc-xtreme.net · publish.zip

/files/PXL/

Germany · Hetzner Online GmbH

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: d7bea86fe610f8381eedf2c96145d722671a580d
SHA256: 776bb76bb34b2146508521b6dc01a69196e6f70ab4a852bdfe083ef8c268a4f0
application/zip
250.38MB
2022-12-14 12:45:46 +0000 UTC
dtc-xtreme.net · publish.zip

/files/PXL/

Germany · Hetzner Online GmbH

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: bf7be835906851599860c92c3c09927e86ef082f
SHA256: b2cb08e56ba6a259fa0da932da078a3ca6defc30b40e805fb715986e4a698a5b
application/zip
250.38MB
2022-12-14 12:45:46 +0000 UTC
drive.openeggbert.com · win-x64.zip

/Windows_Phone_Internals/

Czechia · WEDOS Internet, a.s.

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: dbe89e5c03b286611f00cbd3c3404f9fd078be6b
SHA256: d13a52f7e74fcd5422bdde25706b5e246284fd3af99b66d98b11dd044c69d5f2
application/zip
59.81MB
2024-12-16 13:18:56 +0000 UTC
fido.aalin.co.uk · Microsoft.Surface.Diagnostics.App.Console.v2.193.139.0.exe

/vault/hw/system/Microsoft/Surface Go 1/

Isle of Man · Domicilium (IOM) Limited

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 141f732b997797a3062142565108c2e2eebe309c
SHA256: 235966b6f729abc1c4e8c6a66827d67b8791f3bcf392f688a544513762a4644c
application/octet-stream
12.54MB
2023-03-25 21:42:18 +0000 UTC
47.103.72.207 · WH.zip

/

China · Hangzhou Alibaba Advertising Co.,Ltd.

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6b9b2a45dc72e65c9e9bf7a4ed907d00d8da7dcc
SHA256: 3a2d461d973bce542332bb5d9d83fd5aacf3ec95c2e2a51e522bcf1176eb1ea6
application/zip
9.28MB
2024-11-22 02:40:58 +0000 UTC
rysy.eng.br.pereiraedecol.com.br · rysy.exe

/SIG/files/

Brazil · Brasil Site Informatica LTDA

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: a04470cb9b15aec7ca4b1be50854a8b424eba377
SHA256: 39e666b07b6b19c205b376e7b16b20e8c9cc37be80d1db73ff5468da2c64c50d
application/x-msdownload
190.70MB
2021-11-19 19:40:44 +0000 UTC
rysy.eng.br.pereiraedecol.com.br · rysy.exe

/SIG/files/

Brazil · Brasil Site Informatica LTDA

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: d7bdeb5d2fba18ec4d406db76c6ab3ddc896dd75
SHA256: 3e5ed0eaf650408388453577ec09c231f306f7831750adeb10f7676c6ccffd38
application/x-msdownload
190.70MB
2021-11-19 19:40:44 +0000 UTC
www.rysy.eng.br.pereiraedecol.com.br · rysy.exe

/SIG/files/

Brazil · Brasil Site Informatica LTDA

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: cefd8ac8c371ab8f6fe6a36cd7b79847ab7cf76d
SHA256: 03e4e33c9e3bd64e26c3eb2c3cad3aa5602253a8d86f21556ec8d71feb97567c
application/x-msdownload
190.70MB
2021-11-19 19:40:44 +0000 UTC
www.rysy.eng.br.pereiraedecol.com.br · rysy.exe

/SIG/files/

Brazil · Brasil Site Informatica LTDA

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: bae34050c037a4cfabf9922fb1c40c4ee4239f17
SHA256: 90edd8c41416354665f53c98cd1080883dad093dcf7083c3f6375d3f228b1c82
application/x-msdownload
190.70MB
2021-11-19 19:40:44 +0000 UTC
files2.yaskowski.com · Old-1-ScreenConnect.ClientSetup.exe

/

United States · COMCAST-7922

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: f6eb2983c15982e82078c9f50615146940054d30
SHA256: 0dd894c11c5fe4fbba0570f335f2775a89e21103f32a3555ee72b1e947cbca17
application/octet-stream
5.09MB
2023-07-13 15:56:29 +0000 UTC
files2.yaskowski.com · ConnectWiseControl.ClientSetup.old.exe

/

United States · COMCAST-7922

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 750dac5fb8c1f4e9fa0db02b8411aecb3a06bf85
SHA256: 3578d2928e88860e9d3916d87e05503d79b0ef123d2a153299be551e51a4a179
application/octet-stream
3.95MB
2022-03-20 13:53:33 +0000 UTC
files2.yaskowski.com · 1-ScreenConnect.ClientSetup.exe

/

United States · COMCAST-7922

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 3db36fd7d593a4ad6b356aa05628ecbd563f28e2
SHA256: 637e89867385ac7338ca02d45c734fe935b8c03e18c15b0f8724d06fb8205f19
application/octet-stream
5.15MB
2023-12-12 19:13:19 +0000 UTC
ftp.tesses.net · SimpleNotes.exe

/downloads/apps/SimpleNotes/Server/1.0/Windows-x86/

United States · GIGFIRE

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 85146c88fe3c226605fd2193b8b6375a6071a2be
SHA256: 665baae2c3e2dfdb0c07c88eb0196d2c8ce6e8c3cc8ec015b51845617fe0826d
application/octet-stream
70.49MB
2023-12-08 02:24:56 +0000 UTC
downloads.tesses.net · SimpleNotes.exe

/apps/SimpleNotes/Server/1.0/Windows-x86/

United States · GIGFIRE

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: eb15f8995a789997f4bc11d051851bfaad530599
SHA256: d5ac0b5f0794a305822a4c75ee7b2e0a9484cd231fb09c2ca1f6ccf202834312
application/octet-stream
70.49MB
2023-12-08 02:24:56 +0000 UTC
ftp.tesses.net · SimpleNotes.exe

/downloads/apps/SimpleNotes/Server/1.0/Windows-x64/

United States · GIGFIRE

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 49443c1f63756962203fb32d8f2ffca54151a3e8
SHA256: df2074df9268e346b48d89a0794e968345a5227fed35f8abb316900a28c6110f
application/octet-stream
76.43MB
2023-12-08 02:27:55 +0000 UTC