File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • bremer.pl · web.log.20220818.txt.gz

    /logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: b332ce16adc35739c17e348cd76deddc8a04ff06
    SHA256: 346b1ecf3eaaff20afd20078643107c46ac64b9eef09176f32ecb356c14b4b00
    application/x-gzip
    13.61KB
    2022-08-19 01:43:16 +0000 UTC

  • bremer.pl · web.log.20220818.txt.gz

    /logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: b332ce16adc35739c17e348cd76deddc8a04ff06
    SHA256: 346b1ecf3eaaff20afd20078643107c46ac64b9eef09176f32ecb356c14b4b00
    application/x-gzip
    13.61KB
    2022-08-19 01:43:16 +0000 UTC

  • www.nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • www.nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • mail.nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • mail.nir.vwk.mybluehost.me · lhe.jpt.mybluehost.me-ssl_log-May-2022.gz

    /lhejptmy/homedir/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 8e317a9ee6ee2f83d73847bd0c5cff41fb60e7ed
    SHA256: b360f2bd5ca464a5cf4f3aa3568b4f0085937f0666d3d0f69f9cd5fc732e88f6
    application/x-gzip
    21.05KB
    2022-05-08 12:07:15 +0000 UTC

  • deb.kaisenlinux.org · crowdsec_1.4.6.orig-hub1.tar.gz

    /pool/main/c/crowdsec/

    France · OVH SAS

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/x-gzip
    2.18MB
    2023-03-02 05:35:04 +0000 UTC

  • deb.home-hosting.de · crowdsec_1.4.6.orig-hub1.tar.gz

    /pool/main/c/crowdsec/

    Germany · Deutsche Telekom AG

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/x-gzip
    2.18MB
    2023-03-02 05:35:04 +0000 UTC

  • archive-4.kali.org · crowdsec_1.4.6.orig-hub1.tar.gz

    /kali/pool/main/c/crowdsec/

    France · OVH SAS

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/gzip
    2.18MB
    2023-03-02 05:35:04 +0000 UTC

  • archive-4.kali.org · crowdsec_1.4.6.orig-hub1.tar.gz

    /kali/pool/main/c/crowdsec/

    France · OVH SAS

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/gzip
    2.18MB
    2023-03-02 05:35:04 +0000 UTC

  • chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • ftp.sensee.tech · 20250603-TRACKING.TRACKINGLOG.zip

    /datacook/Data/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 7e3e48d766203d0a1949aa7a7b8b6767b6f989df
    SHA256: 9ebb128254b32c9c17f75ca3600693358c27703e970a35c5b45abf7b07668647
    application/zip
    9.22MB
    2025-06-03 23:11:23 +0000 UTC

  • robuxrobloxvn.com · htdocs.zip

    /

    · CLOUDFLARENET

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth

    SHA1: 32073f4de9cb0c958eff86a8fefca043bbcc1b06
    SHA256: 0032bff749dd0bfb67f930ea04cbc9bc23e4a6ee9e233e88745f30f38c51e4db
    application/zip
    506.74MB
    2025-10-30 09:31:39 +0000 UTC

  • www.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • jmitp.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • mailer.orchestrate.ie · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • apt-server.aces-aoe.net · crowdsec_1.4.6.orig-hub1.tar.gz

    /aces-base/pool/main/c/crowdsec/

    United States · AMAZON-AES

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/octet-stream
    2.18MB
    2023-06-08 20:02:37 +0000 UTC

  • apt-server.aces-aoe.net · crowdsec_1.4.6.orig-hub1.tar.gz

    /aces-base/pool/main/c/crowdsec/

    United States · AMAZON-AES

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/octet-stream
    2.18MB
    2023-06-08 20:02:37 +0000 UTC