File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • dl.tekannabrand.org · STOPX Player.exe

    /

    United States · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 7852fe405588244ac0e2bfc983d50dd5bb09e1c4
    SHA256: 9e17edbdfa5c3f4d549c68a77af9038d7ca164a3a15b2ddba9650f11f67e569d
    application/octet-stream
    41.29MB
    2025-04-08 17:37:18 +0000 UTC

  • dl.tekannabrand.org · PQLauncher.exe-1763316991.737341-Whv2YFM1.exe

    /

    United States · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: fdbf852b3780f19c196ffcb7c448059a8632bcc0
    SHA256: 32bda462ad623e9dd9c5f1f0b6a952e7b55473b8848ff9df1a2dc7cf0cb8234f
    application/octet-stream
    41.29MB
    2025-11-16 18:15:19 +0000 UTC

  • dl.tekannabrand.org · PQLauncher.exe

    /

    United States · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 35278ee2f4a585a8a0808a829296c1fbc088f0a1
    SHA256: e737a5d2e95fb47baf0024041bb166eac1a2d9f75c94cda661e2a402e3d8d261
    application/octet-stream
    41.29MB
    2025-11-16 17:36:15 +0000 UTC

  • usb.carochris.com · sb-setup.exe

    /2601 i_apps/Autre/

    France · Free SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 3ff9814bf2a07cf74b5f334905e8cf26ab99e4f4
    SHA256: 0e1f66a6c6328cb74a6a6323b4c960cea42c6f4e3fe92a17431bb171a4a10517
    application/x-msdos-program
    39.04MB
    2026-01-24 20:24:43 +0000 UTC

  • cloudinc.direct.quickconnect.to · Diskusage.exe

    /

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 6e464010d5d0ff462c7fb00da4a0d6a7166ebb22
    SHA256: 65d38770a29376c2ee59be0d334e0d20e8e111a5fb279b67f9f769b8b2a0148d
    application/x-msdownload
    142.00MB
    2025-03-25 09:18:00 +0000 UTC

  • faucet.aas.duke.edu · ScreenConnect.ClientSetup-GEO.exe

    /pub/pc/bigfix/patches/

    United States · Duke University

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 2c8d3b80e3085c82ee300ddccee92795ff88cd28
    SHA256: aef65ea2513495103dc78e5d19728ddcec771e04f4e7d7f075509bfb70889a71
    application/x-msdos-program
    1.73MB
    2016-06-08 12:55:20 +0000 UTC

  • static.dominicnicholson.com · ERRv1.2.6E.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 65c7f166b2ec84e85fd170ff96203161e2d8f658
    SHA256: 1d2f333f5b04eefe5049d9667acc1a677a2915dc9e13d118a85331e36803e081
    application/zip
    3.21GB
    2025-02-08 22:55:59 +0000 UTC

  • static.dominicnicholson.com · ERRv1.2.5.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 736995669f8792210fe1cb3165130a18c1d35803
    SHA256: 0e2aea79580cff5c30e4ebdf63120d8c749a07cc5cad79e7cc3f58ec31ef1147
    application/zip
    3.19GB
    2025-02-08 22:43:34 +0000 UTC

  • static.dominicnicholson.com · ERR.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: aca98f3e7dd16643728644dbec355678f81ebf21
    SHA256: 422c6f23088b90dfe28fde5105c2649b129895e538f3f903d0756c2c02df67da
    application/zip
    3.16GB
    2024-11-19 03:00:50 +0000 UTC

  • static.dominicnicholson.com · ERRv1.2.8I.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 8c3325cc25a05e3d806f36516118462a2a0da4e2
    SHA256: 7e1942a31c2094441ffc705f3bb39dc2d6e23131cad3159d3130cd9dbecb600f
    application/zip
    3.30GB
    2025-04-05 23:01:59 +0000 UTC

  • static.dominicnicholson.com · ERRv1.2.6E.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 42fe2ec51344c70be4a3ab82de6c1490f925515f
    SHA256: 30e14904adcd5e14709eeb7350563b1cee543d3d3379f9ef166ee691d5039d26
    application/zip
    3.21GB
    2025-02-08 22:55:59 +0000 UTC

  • static.dominicnicholson.com · ERRv1.2.5.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: e2c60a13441b0aec3632aad7e18bfe66e4c5a192
    SHA256: 0aad10ed412dd3f823bb3a6c715c73380b5fddf831a3d44e4377809e7aefa87e
    application/zip
    3.19GB
    2025-02-08 22:43:34 +0000 UTC

  • static.dominicnicholson.com · ERR.zip

    /Misc_Files/

    United States · Comcast Cable Communications, LLC

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 26ff7b99d83baa0f78d141be40d1204a0ec4c8b4
    SHA256: b7a3629430d2c6e1cce104d9aae204c093fe67a0cf2cc6d4e76a082eca385e80
    application/zip
    3.16GB
    2024-11-19 03:00:50 +0000 UTC

  • fastping.top · NOCDashboard-v2.1.6.zip

    //nocdashboard/

    France · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: ea2ca25ef09a300e8103dfd0ffdccb329fffbbe6
    SHA256: 5fbfc86cd789880f7ab90e7216aafa0416d6a914660747d707b8436c5c6a22a8
    application/zip
    134.16MB
    2026-10-24 08:24:51 +0000 UTC

  • fastping.top · NOCDashboard-v2.1.6.zip

    //nocdashboard/

    France · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 1227febd1193ed042ec5b8b52afffb2c1fe102c9
    SHA256: 463a189e4e20e0bd529d7a934d1578b2ab490bdd972ab4c1f1e335d37effe26b
    application/zip
    134.16MB
    2026-10-24 08:24:51 +0000 UTC

  • www.fastping.top · NOCDashboard-v2.1.6.zip

    //nocdashboard/

    France · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: ae892afea3d5d0d97e24976c66103301718c6310
    SHA256: 34e6c3cb9eb295294e1b592d908e3040b8366efe19997030058fe7228d6210dc
    application/zip
    134.16MB
    2026-10-24 08:24:51 +0000 UTC

  • www.fastping.top · NOCDashboard-v2.1.5.zip

    //nocdashboard/

    France · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 810701c3a590d94405be528ba37fca5367f303f4
    SHA256: 3bd250005c6305e21a5331c04f72269dd4b566bca3b5656e2810ffdd0c34f280
    application/zip
    134.15MB
    2026-09-19 06:51:48 +0000 UTC

  • fastping.top · NOCDashboard-v2.1.5.zip

    //nocdashboard/

    France · OVH SAS

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 252bcce5e7e8472c891893441f9267b0c079e867
    SHA256: d2b26c5402000db877dfa0351eed0a965f16ddeb269623de4e3c391b25e5e982
    application/zip
    134.15MB
    2026-09-19 06:51:48 +0000 UTC

  • repo.aseven.pro · taa.installer.exe

    /redist/

    Russia · JSC Ufanet

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 975710ef3fb9dd0447a58e152acb967d1a53e15b
    SHA256: f63bfce5c2f1491142775ae892a294781f0111c128f7dc16a0ce4e2a922f5792
    application/octet-stream
    3.51MB
    2022-08-03 05:01:33 +0000 UTC

  • repo.aseven.pro · taa.point.exe

    /projects/vm.point/1.0.0/

    Russia · JSC Ufanet

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 290f1710e603586a519c8492517bef0da7f45d06
    SHA256: 1dab946fd381e234c5db51d09a5ee9b38c800b5bb7c612a08b6ef0351ad61455
    application/octet-stream
    6.97MB
    2022-08-02 12:05:07 +0000 UTC