File search engine

test.web.api.atra.gov.af · web.api.atra.gov.af.zip

/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: b91f92065d126b5705a01a8f88f37d28235f5acb
SHA256: acf12a7a9da66f89e7e79117ff92186045a94840fbbddea7b5bee6178966b428
application/zip
3.34GB
2026-01-27 05:52:28 +0000 UTC
162.240.172.46 · guiadaescolha.com.br.zip

/backups_antigo_servidor/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 83e21cbb01c7244e43f98d0b2b2ff668a83ff46f
SHA256: 1e95631062183d0d606561f925c3daa52be7314c65eafcaa15d292b109007be6
application/zip
638.70KB
2024-04-23 19:00:29 +0000 UTC
212.3.79.229 · mcc-services.de.zip

/hms/htx/templates/nanobioeurope2014/download/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 828475cefcb311be4aa9a75351dca19d25ac539c
SHA256: 55ee865d1c66b1f25dc57dd9f8a6cbdfe8e0fbb2ecba0e6e8a2427d94a853b47
application/zip
578.03KB
2016-05-03 16:05:41 +0000 UTC
212.3.79.229 · mcc-services.de.zip

/hms/htx/templates/nanobioeurope2014/download/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 828475cefcb311be4aa9a75351dca19d25ac539c
SHA256: 55ee865d1c66b1f25dc57dd9f8a6cbdfe8e0fbb2ecba0e6e8a2427d94a853b47
application/zip
578.03KB
2016-05-03 16:05:41 +0000 UTC
173.255.228.5 · fashiongilt.zip

/fashiongilt.com/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: c5ecebc4b62d96d38ec6a7a4d6bd15706a178f7a
SHA256: 6a377d9f8e061e68a8cfc4b3df701dd07c51974bd5545fa1df199600f713a666
application/zip
6.68MB
2013-01-03 18:42:47 +0000 UTC
dalemarion.com · iersc.org03sep2025.zip

/backupzip03sep2025/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara VUL_JQuery_FileUpload_CVE_2018_9206 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: afca283217cca96a5d62b6be379a7e02efbd8e32
SHA256: 0331f7e84e60c574ae758865446f1e4e6ac01302ad32d586704999ed3e36121f
application/zip
26.85MB
2025-09-03 15:47:18 +0000 UTC
wfinan.com · green_13_11_2025.zip

/green/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 202e39fb7123715afb194bbd9d54da59d004d1a2
SHA256: 09653d599a455a2546bf802a5ec2848a7f2ff2af11a08cb70c444180e220fb5f
application/zip
1.05GB
2025-11-13 13:23:45 +0000 UTC
capcallllc-com.efv.yhd.mybluehost.me · capcallllc-com.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: a87a3e9789ce6524f2c124eda39a27bd75d6a70c
SHA256: 2f7982142fae7106d3ed4e271488b86927264c16101711439296617fe3f5c0cf
application/zip
2.94GB
2025-09-17 05:57:35 +0000 UTC
www.capcallllc-com.efv.yhd.mybluehost.me · capcallllc-com.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 38105ff67eb50a5a9fd16edb48b6fdb794a1e8d4
SHA256: 7d2b4030e5562ef39d916e73f7a644ddad1545fee3ff3f915b5da48ecb071d0c
application/zip
2.94GB
2025-09-17 05:57:35 +0000 UTC
capcallllc-com.efv.yhd.mybluehost.me · capcallllc-com.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 08c57f5bf3398fa03ae78d1d9eb3b132fb4b0c98
SHA256: 91962bf3dfc83a6ed37b8a6f288383463288223102e434a43b408437313e0d92
application/zip
2.94GB
2025-09-17 05:57:35 +0000 UTC
www.capcallllc-com.efv.yhd.mybluehost.me · capcallllc-com.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 975e5374fc6fc4845d5eebe4429a97b72e24caed
SHA256: c6494f566eddd594bfa616f20e1e91e6a5a5b1bc9d636c49585b90b03b18d66b
application/zip
2.94GB
2025-09-17 05:57:35 +0000 UTC
dalemarion.com · iersc.org03sep2025.zip

/backupzip03sep2025/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara VUL_JQuery_FileUpload_CVE_2018_9206 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a4cbf0ac5296344f503f820596c148f13b487a1e
SHA256: b01b9172c500d2a88678bbb8b46b79c787bd5c21fb91cbe89a84de3201cb10bb
application/zip
26.85MB
2025-09-03 15:47:18 +0000 UTC
dalemarion.com · aitradingrobot.shop03sep2025.zip

/backupzip03sep2025/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara VUL_JQuery_FileUpload_CVE_2018_9206 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: dd92baf29272a52e3b020dc8b1edf86a54810f11
SHA256: a19ea7ec719754a170f8e24b9bdfb21ed8582a0c57414c40c467b50bb7c30500
application/zip
743.06MB
2025-09-03 15:48:44 +0000 UTC
bobson.ludost.net · broken-wp.tar.bz2

/faerchen/

·

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: d4615a784ba095e0723920d943be280817041227
SHA256: a0d8fdabd057a60b5f62dcf8cf57a32f0a60c2285ade26575862dfb075506c36
application/x-bzip2
1.58MB
2016-02-18 22:22:44 +0000 UTC
preahputhpadima108monbokor.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara multiple_php_webshells From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

SHA1: a6e7c85514ba691989d9dbcf636f00bcf245b862
SHA256: 5076543c8572b946e9115f02a492fd34fae1c811c475f02540a451ab1085e06f
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC
preahputhpadima108monbokor.com.sokhahotels.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: fb2fdc61faaeb37f54cdbd7fe1305ef30e82604c
SHA256: b8190ed05567b40a566425829be382fa79b7bb2bf9dc84cab56b8eaa0d5ce71a
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC
www.preahputhpadima108monbokor.com.sokhahotels.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara multiple_php_webshells From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

SHA1: a6e7c85514ba691989d9dbcf636f00bcf245b862
SHA256: 5076543c8572b946e9115f02a492fd34fae1c811c475f02540a451ab1085e06f
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC
preahputhpadima108monbokor.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 9874f1dcacc7b91d84bc88ea47cffc0bbd9d038d
SHA256: 295f21042b49c54009407cacf0cdd0d61deddd6eb9c192aa93af3da1f868f6ef
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC
www.preahputhpadima108monbokor.com.sokhahotels.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

SHA1: 4ff810f46bf2682b1ecf5e00c4851127d0dd0896
SHA256: 161ccceb9f3d288eeef3dfc17b841e0f45bb497c15ee04ece05c37040e7bb33a
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC
preahputhpadima108monbokor.com.sokhahotels.com · wp-admin.zip

/

·

Yara SUSP_Base64_Encoded_Hex_Encoded_Code From Florian Roth by Florian Roth (Nextron Systems)

Yara webshell_PHP_r57142 From Florian Roth by Florian Roth (Nextron Systems)

Yara multiple_php_webshells From Florian Roth by Neo23x0 Yara BRG + customization by Stefan -dfate- Molls

SHA1: a6e7c85514ba691989d9dbcf636f00bcf245b862
SHA256: 5076543c8572b946e9115f02a492fd34fae1c811c475f02540a451ab1085e06f
application/zip
216.00MB
2025-12-18 09:28:03 +0000 UTC