File search engine

216.146.204.195 · revslider.zip

/bot/

·

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: e1f0d8363481bd4b37152f1a456e2e6ef4240643
SHA256: e94efb0187df540e513c2d1bed163702a1dccd8b7009e1144cc6cf621d678a8a
application/zip
1.82KB
2016-06-20 12:09:19 +0000 UTC
www.billing.klifcom.net · old.zip

/

Ukraine · Branch Enterprise Netgroup-Service

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 2f2fa86792c1494949f3f9be7f49965da390a44b
SHA256: 655b35cdc727ce248479f0119baf79ce9b7696b240706071dcb2cce73001b20c
application/zip
8.81MB
2025-07-29 21:38:46 +0000 UTC
www.billing.klifcom.net · old.zip

/

Ukraine · Branch Enterprise Netgroup-Service

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: fbb4d9aee88652d11f5047969b2e105241531bed
SHA256: ef99775ff1f66fab903c6c34fe4815ced5bb48a0b1a17358fd282c17d028c6da
application/zip
8.81MB
2025-07-29 21:38:46 +0000 UTC
billing.klifcom.net · old.zip

/

Ukraine · Branch Enterprise Netgroup-Service

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 1d863ba447c11a88aebfb9fbbf7d73c240f03105
SHA256: 432cca42b8b1d58d9e3be1f5a78012391c40e908226dc2f468f877c077b3be8d
application/zip
8.81MB
2025-07-29 21:38:46 +0000 UTC
billing.klifcom.net · old.zip

/

Ukraine · Branch Enterprise Netgroup-Service

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: de12961c805691706f089d2dd93e29f903e87d9a
SHA256: 1e3d02c38113fa03b2f9d496efd3fbb126846f7d2b3abb2d40d64bed0ec1c83b
application/zip
8.81MB
2025-07-29 21:38:46 +0000 UTC
170.249.197.158 · folders-sospechosas.zip

/

United States · PRIVATESYSTEMS

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

SHA1: ff44617f0c0d08df29e8c376c7e9a88a71c7deec
SHA256: 2715e1e56b565e7706d5f0849b22b0be1650a8ff775f8b38361a43e04906ad7f
application/zip
858.05MB
2023-07-20 20:48:44 +0000 UTC
superseriema.com.br · www.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

SHA1: ca96e7b5d3a64a01fcd94731ec5db7a9a6ef11e7
SHA256: 4a67aab824f1b88d5f71e31424d319326b6c31937992587b9e50ff0d1630eb1b
application/zip
193.07MB
2025-11-16 23:43:40 +0000 UTC
superseriema.com.br · webmail.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 21621039d32ed0f64688485c032eb4ea0f0cd31f
SHA256: 7b61368d64a610aa07406d93a5f293fa2b84c9ab7305bd6e788c180a2034cbc6
application/zip
1.43MB
2025-12-02 23:58:42 +0000 UTC
superseriema.com.br · webmail.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: d7d6eb423622d18e67c1b5bcf32c1c7075482ffc
SHA256: 6a2d13f7451b47e30e4ecd705f00f0675725ae9eef793dec13f5f67b23638561
application/x-gzip
458.74KB
2025-09-30 12:09:15 +0000 UTC
superseriema.com.br · viewer.php.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: d77be0ff3721d2bba4f1edb1cb8be618392c2d4b
SHA256: cb101fee73bedc28a6996f6bb43310e58c7158ff99bab16b1e6be4034fc86edc
application/x-gzip
31.39KB
2025-12-03 07:11:17 +0000 UTC
superseriema.com.br · www.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

SHA1: deb9f188fb0d5af0f48cf9c69cc98229994707fc
SHA256: cf3c9c3f86f67b0372871a3ca7bdd39569cbdd1b12364543b1e2177e698d06bc
application/zip
193.07MB
2025-11-16 23:43:40 +0000 UTC
superseriema.com.br · webmail.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 21621039d32ed0f64688485c032eb4ea0f0cd31f
SHA256: 7b61368d64a610aa07406d93a5f293fa2b84c9ab7305bd6e788c180a2034cbc6
application/zip
1.43MB
2025-12-02 23:58:42 +0000 UTC
superseriema.com.br · webmail.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: d7d6eb423622d18e67c1b5bcf32c1c7075482ffc
SHA256: 6a2d13f7451b47e30e4ecd705f00f0675725ae9eef793dec13f5f67b23638561
application/x-gzip
458.74KB
2025-09-30 12:09:15 +0000 UTC
superseriema.com.br · viewer.php.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: d77be0ff3721d2bba4f1edb1cb8be618392c2d4b
SHA256: cb101fee73bedc28a6996f6bb43310e58c7158ff99bab16b1e6be4034fc86edc
application/x-gzip
31.39KB
2025-12-03 07:11:17 +0000 UTC
superseriema.com.br · 54375.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 0fa4a8bfdb39763b36bed5fb5ec34dc3b856ca95
SHA256: 0bba929e225ee212b36f5202626ace0655e106b896984d4d89351fd4341ec57e
application/zip
2.14MB
2025-09-30 11:40:55 +0000 UTC
superseriema.com.br · 54375.zip

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 0fa4a8bfdb39763b36bed5fb5ec34dc3b856ca95
SHA256: 0bba929e225ee212b36f5202626ace0655e106b896984d4d89351fd4341ec57e
application/zip
2.14MB
2025-09-30 11:40:55 +0000 UTC
superseriema.com.br · 54375.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 33488df40460e4416ae7182f2c1b6e74f35dcab6
SHA256: 6f27e78b85502cbec3f5f8307d990515f30694558a20e33f9507ccaa2a071e0e
application/x-gzip
2.77MB
2025-09-30 12:12:41 +0000 UTC
superseriema.com.br · 54375.tar.gz

/54375/

United States · UNIFIEDLAYER-AS-1

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Download archived sample
The password is "infected"

SHA1: 33488df40460e4416ae7182f2c1b6e74f35dcab6
SHA256: 6f27e78b85502cbec3f5f8307d990515f30694558a20e33f9507ccaa2a071e0e
application/x-gzip
2.77MB
2025-09-30 12:12:41 +0000 UTC
www.ugelyunguyo.edu.pe · public.zip

/sicad/storage/app/

Canada · OVH SAS

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

SHA1: 76213d6278db8383301708a40811e2f2cdc38fc3
SHA256: f9217f13ca1c0500f952918ce3bf834f7d683a7e7948c806425eb08f4184360f
application/zip
3.15GB
2025-11-24 16:50:10 +0000 UTC
ugelyunguyo.edu.pe · public.zip

/sicad/storage/app/

Canada · OVH SAS

Yara WEBSHELL_PHP_Dynamic_Big From Florian Roth by Arnim Rupp (https://github.com/ruppde)

SHA1: 8f3725e6009b027ebad5a383f71baaa4ab0efe77
SHA256: 9d7329040180a7a502516f0a19c50efe06d89766f764f62e7f7b03f89a7734ee
application/zip
3.15GB
2025-11-24 16:50:10 +0000 UTC