File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • usb.carochris.com · O&&O ShutUp10 1.9.1444_Portable.exe

    /apps/

    France · Free SAS

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 93fea4816fad20993c254341957f7ae612c3d0d7
    SHA256: 6ff124adbd65b5c74edcc5a60b386919542ca2a83bc4fcf95db1274af7963c6e
    application/x-msdos-program
    2.03MB
    2025-04-12 18:26:53 +0000 UTC

  • usb.carochris.com · PDFCreator-5_3_2-Setup.exe

    /2610 i_apps/

    France · Free SAS

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: b5418e01ec5b8028aa423c2bf7cdf2c110205e0c
    SHA256: 8168bc4c94f9bd2df879cac0675959474fd1dc17402582d1c6e4a1fdae9263b0
    application/x-msdos-program
    43.10MB
    2025-01-08 11:26:20 +0000 UTC

  • updates.autobase.com.ar · AppBuilder-win-Portable.zip

    /appbuilder/

    Argentina · InterBS S.R.L. (BAEHOST)

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 69aa38e520b743de93cf02f1f4db495d4dd46a17
    SHA256: fba0b92e6385d911aeb8675fe3d97938255a72500c7bdb72a1fe620c1a961665
    application/zip
    9.55MB
    2025-05-17 15:01:44 +0000 UTC

  • usb.carochris.com · PDFCreator-6_2_1-Setup.exe

    /2601 i_apps/Autre/

    France · Free SAS

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

    SHA1: 6ac1fa1e9a2fda9217e2d4a250ff06ac98c74072
    SHA256: edd2526be007593983acc8c9fa32ab08b2f0f60ae0b538923099b2349d9b4545
    application/x-msdos-program
    102.17MB
    2026-01-24 20:27:08 +0000 UTC

  • hk.catxstar.com · Shadowsocks-4.4.1.0.zip

    /

    United States · IT7 Networks Inc

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 1aab2b5f41c1c90ba8024c5a8bb8f902e7600727
    SHA256: 62b74a688d22bfdf20f673a351580029d7b9de67c6facc9a5613b22b3f798968
    application/zip
    4.22MB
    2022-02-08 11:02:13 +0000 UTC

  • rockzhang.com · new-v2ray-core.zip

    /

    United States · IT7 Networks Inc

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: cdb85125bf36621da82a9edb3fc71fa0bfe6abea
    SHA256: d041ecd5283caeb9a29d4765d11e9a888d01096f0105cf02bde71865f2be35b0
    application/zip
    98.74MB
    2025-06-19 04:09:55 +0000 UTC

  • rockzhang.com · new-v2ray-core.zip

    /

    United States · IT7 Networks Inc

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: cdb85125bf36621da82a9edb3fc71fa0bfe6abea
    SHA256: d041ecd5283caeb9a29d4765d11e9a888d01096f0105cf02bde71865f2be35b0
    application/zip
    98.74MB
    2025-06-19 04:09:55 +0000 UTC

  • dl.vakilshoa.com · v2rayN-With-Core.zip

    //files/

    Iran · Asiatech Data Transmission company

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

    SHA1: 21161174297890ce3e6a145e986f7711ee025459
    SHA256: b4428e657b05f8b9b9eafeba5cd5d813ca4864671c94646be31d7bfb7b17908e
    application/zip
    111.48MB
    2026-05-25 11:20:16 +0000 UTC

  • files.rhinodatabase.org · rhinodatabase_v1.6-files.zip

    /

    France · Scaleway SAS

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: d9ed11cb5a68a38e72234fe84c21750da9f95ea1
    SHA256: f3855cfd527f0ea65f8aab4d5e79befdd43fffd18e0598a4f1a52ef63e34bb10
    application/zip
    30.51MB
    2025-11-03 10:06:54 +0000 UTC

  • files.rhinodatabase.org · rhinodatabase_v1.6-files.zip

    /

    France · Scaleway SAS

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: d9ed11cb5a68a38e72234fe84c21750da9f95ea1
    SHA256: f3855cfd527f0ea65f8aab4d5e79befdd43fffd18e0598a4f1a52ef63e34bb10
    application/zip
    30.51MB
    2025-11-03 10:06:54 +0000 UTC

  • tools.17speed.vip · v2rayN-windows-64.zip

    /V2ray/Windows/7.8.1/

    Hong Kong · Alibaba (US) Technology Co., Ltd.

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: a00e3bcb7c37056328bb4e29dc6af6437e5209bd
    SHA256: 22287e7797c7e2f6c12eac17d00615cfc33775263a1bacc7e3f8a27c20443f4a
    application/zip
    61.58MB
    2026-10-02 11:03:33 +0000 UTC

  • share.kksk.fun · Shadowsocks-4.1.10.0.zip

    /windows/

    · Cloudflare, Inc.

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 9fbda5bcc9da4ba2b9165f8813b7b58cd25734cb
    SHA256: 97c1afbdfbe31e7fed17143d9885be6588be294488cffc83661a5ef55655d3d2
    application/zip
    2.32MB
    2022-05-17 02:25:02 +0000 UTC

  • share.kksk.fun · Shadowsocks-4.1.10.0.zip

    /windows/

    · Cloudflare, Inc.

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 9fbda5bcc9da4ba2b9165f8813b7b58cd25734cb
    SHA256: 97c1afbdfbe31e7fed17143d9885be6588be294488cffc83661a5ef55655d3d2
    application/zip
    2.32MB
    2022-05-17 02:25:02 +0000 UTC

  • dl.sevennot.ir · v2rayN-With-Core.zip

    /

    Iran · Asiatech Data Transmission company

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

    SHA1: fa5a11863967e966d73cd627d1ad1f0a1491e8ef
    SHA256: 5392ea40078a2cbe0903ab5515e9d9d095cd6d1967694b48df4f8741a6d619c2
    application/zip
    148.17MB
    2026-04-05 21:09:25 +0000 UTC

  • developmentserver.org · SMTP_Test_Tool_v5_Preleases_RC1.zip

    /smtptester/SMTPtool/bin/

    · Cloudflare, Inc.

    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 516a3187e54df7ffe63688520ba8549be65859c2
    SHA256: 5d1d1c14b4ca5a3b8c11d3a2884c53400a9a8c0511c868a25cb2dfc7198a53a1
    application/zip
    496.28KB
    2025-05-22 10:36:42 +0000 UTC

  • xzxz11111.com · v2rayN_u9.zip

    /

    United States · DMIT Cloud Services

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

    SHA1: 3f7f673fc13fe5a860d12a98ba6804c53838a079
    SHA256: 7f30244ebcdfc443022afe673520499ac8764690e284cf419e34373ba533ea4d
    application/zip
    109.74MB
    2026-08-05 11:52:42 +0000 UTC

  • xzxz11111.com · v2rayN_da.zip

    /

    United States · DMIT Cloud Services

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

    SHA1: 6bb86d3c647afba0f4fad1b7c8cc24a391550ade
    SHA256: 3d6aa5a4b1909f503e5c35431df8aaf1f52bebf61732c724f0a4ed86fc654a82
    application/zip
    109.73MB
    2026-08-05 11:52:13 +0000 UTC

  • jp.catxstar.com · Shadowsocks-4.4.1.0.zip

    /

    United States · IT7 Networks Inc

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 1aab2b5f41c1c90ba8024c5a8bb8f902e7600727
    SHA256: 62b74a688d22bfdf20f673a351580029d7b9de67c6facc9a5613b22b3f798968
    application/zip
    4.22MB
    2022-02-08 11:02:13 +0000 UTC

  • download.wexford.nl · OOAPB.exe

    /cleanup/

    The Netherlands · KPN B.V.

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 039bc0eaacae791c0b5b7b0d93883958f1c29e92
    SHA256: 053ce0a4f1cddd3bc6eff802cd1e39a2c55a33798e7ed46df902729bb04941c1
    application/octet-stream
    2.17MB
    2024-07-10 08:55:12 +0000 UTC

  • download.wexford.nl · OOAPB.exe

    /cleanup/

    The Netherlands · KPN B.V.

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 039bc0eaacae791c0b5b7b0d93883958f1c29e92
    SHA256: 053ce0a4f1cddd3bc6eff802cd1e39a2c55a33798e7ed46df902729bb04941c1
    application/octet-stream
    2.17MB
    2024-07-10 08:55:12 +0000 UTC