File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • deb.kaisenlinux.org · crowdsec_1.4.6.orig-hub1.tar.gz

    /pool/main/c/crowdsec/

    France · OVH SAS

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/x-gzip
    2.18MB
    2023-03-02 05:35:04 +0000 UTC

  • www.mvb.xap.mybluehost.me · netye.arainfotec.com-ssl_log-May-2022.gz

    /arainfot/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 634a14ad777b194c5b302663f08aa9992abaf013
    SHA256: 2c83d0a2a2ae762b618fbb75989bec0adb21e16ad7a206c02f5fbfdf80adc531
    application/x-gzip
    4.95KB
    2022-05-31 12:01:26 +0000 UTC

  • mvb.xap.mybluehost.me · netye.arainfotec.com-ssl_log-May-2022.gz

    /arainfot/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 634a14ad777b194c5b302663f08aa9992abaf013
    SHA256: 2c83d0a2a2ae762b618fbb75989bec0adb21e16ad7a206c02f5fbfdf80adc531
    application/x-gzip
    4.95KB
    2022-05-31 12:01:26 +0000 UTC

  • mail.mvb.xap.mybluehost.me · netye.arainfotec.com-ssl_log-May-2022.gz

    /arainfot/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 634a14ad777b194c5b302663f08aa9992abaf013
    SHA256: 2c83d0a2a2ae762b618fbb75989bec0adb21e16ad7a206c02f5fbfdf80adc531
    application/x-gzip
    4.95KB
    2022-05-31 12:01:26 +0000 UTC

  • mail.mvb.xap.mybluehost.me · netye.arainfotec.com-ssl_log-May-2022.gz

    /arainfot/logs/

    United States · UNIFIEDLAYER-AS-1

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 634a14ad777b194c5b302663f08aa9992abaf013
    SHA256: 2c83d0a2a2ae762b618fbb75989bec0adb21e16ad7a206c02f5fbfdf80adc531
    application/x-gzip
    4.95KB
    2022-05-31 12:01:26 +0000 UTC

  • www.rescue.ocd-cybersec.com · CIS-CAT-Assessor-v4.21.0.zip

    /data/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth

    SHA1: 89ac07d165a3fef7f99be1ab1d4748b7b123172d
    SHA256: e5dd3f5d4b37fa3ec724cade56924a5a6987504425876a87e7dc197ff359c954
    application/zip
    159.92MB
    2022-09-13 12:56:15 +0000 UTC

  • rescue.ocd-cybersec.com · CIS-CAT-Assessor-v4.21.0.zip

    /data/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth

    SHA1: 7121ac85f31c859519284821b60dac7087a28b4a
    SHA256: 33f4cd5bfd4898bf2c35ffd3dac2501ba9c5267903208f35f16376e573e7a184
    application/zip
    159.92MB
    2022-09-13 12:56:15 +0000 UTC

  • 137.74.48.71 · ortcoin.okra.com-ssl_log-Apr-2023_NGINX.gz

    /bk/jetbackup_1_1_644053f6fb1ad1337f3b35d2/okradeveloper/jbm.account.full/homedir/logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 92faca898818d4577264693d367c137f386b03bd
    SHA256: f63ff0ccb92f324da77a16f748191d0d65e6e84d9be90ad698c3882dd5c53b76
    application/x-gzip
    3.15MB
    2023-04-19 22:30:26 +0000 UTC

  • 137.74.48.71 · ortcoin.okra.com-Apr-2023_NGINX.gz

    /bk/jetbackup_1_1_644053f6fb1ad1337f3b35d2/okradeveloper/jbm.account.full/homedir/logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 24a03f1ebee8ad4dcbf28ac7d0c54b20f7450524
    SHA256: ec3b62129b71bb11fdde8155e6eeb1513186625c9037f67afe28f862809c275b
    application/x-gzip
    423.53KB
    2023-04-19 22:30:25 +0000 UTC

  • chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • debian.apt.nerve.cloud · crowdsec_1.4.6.orig-hub1.tar.gz

    /pool/main/c/crowdsec/

    The Netherlands · MICROSOFT-CORP-MSN-AS-BLOCK

    Yara EXPL_JNDI_Exploit_Patterns_Dec21_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: cd3b82861d8d287841b561d5f49eec9483b6c22e
    SHA256: c7bd790be9e03a5eff7e6713ac7562a107e31984f28d26222d72f38d4bf269e6
    application/octet-stream
    2.18MB
    2023-03-14 15:36:50 +0000 UTC

  • phplist.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • dev.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • jmitp.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • www.chrisdevries.com · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • mailer.orchestrate.ie · access.log-2022-04-30.bz2

    /cof-art.com/log/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 93aba438b01d6c016b3622195dc8a7274a67406e
    SHA256: e4817affe71dd7fa31bc0a20223d658aa40d8b6f5c9adaf1293b9667a3fbf0ef
    application/x-bzip2
    21.50KB
    2022-04-30 21:59:45 +0000 UTC

  • v5.hotel-licorne.com · ovh-access_log-20240303.gz

    /log/httpd/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 75e2b46defaa661a98aa8c99b976e2dea51d3056
    SHA256: 6bcaeb9f14dc2f6aa96277b942cd4bbc3a5633ec9253c77ae9ee3d79a1f1bc95
    application/x-gzip
    312.62KB
    2024-03-10 03:40:05 +0000 UTC

  • v5.hotel-licorne.com · ovh-access_log-20240218.gz

    /log/httpd/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 21090030c9636163bf048ab22512190be0dc25b5
    SHA256: 006b06371e38450ca602c0f1c515aba28f23a1b0525ce0a1d5988b4128071b1b
    application/x-gzip
    295.31KB
    2024-02-25 02:41:34 +0000 UTC

  • 137.74.48.71 · ortcoin.okra.com-ssl_log-Apr-2023_NGINX.gz

    /bk/jetbackup_1_1_644053f6fb1ad1337f3b35d2/okradeveloper/jbm.account.full/homedir/logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 92faca898818d4577264693d367c137f386b03bd
    SHA256: f63ff0ccb92f324da77a16f748191d0d65e6e84d9be90ad698c3882dd5c53b76
    application/x-gzip
    3.15MB
    2023-04-19 22:30:26 +0000 UTC

  • 137.74.48.71 · ortcoin.okra.com-Apr-2023_NGINX.gz

    /bk/jetbackup_1_1_644053f6fb1ad1337f3b35d2/okradeveloper/jbm.account.full/homedir/logs/

    France · OVH SAS

    Yara SUSP_EXPL_POC_VMWare_Workspace_ONE_CVE_2022_22954_Apr22 From Florian Roth by Florian Roth
    Download archived sample
    The password is "infected"

    SHA1: 24a03f1ebee8ad4dcbf28ac7d0c54b20f7450524
    SHA256: ec3b62129b71bb11fdde8155e6eeb1513186625c9037f67afe28f862809c275b
    application/x-gzip
    423.53KB
    2023-04-19 22:30:25 +0000 UTC