Files matching SHA1 checksum 63a64817ef57486781050366b685ecf19302649b checksum

yy.q2s5.my · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · I LAYER LIMITED

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

dan.umlsy.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · I LAYER LIMITED

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

ya.umlsy.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

dmhm.vialy.cn · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

aax.q2s5.my · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

tee.tieace.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

cmy.f95he.my · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

xiaoxi.one · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

awy.f95he.my · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

ee.umlsy.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

wwxx66.vip · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

www.wwxx66.vip · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

919cdk.cn · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

www.919cdk.cn · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

jdukkyoukeleshouyougongzuoshihpjywzrycnhpjywryfghhpjywzryhhrhpi.net.cn · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

yyfk.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

www.x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

laoyoutiao.vip · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC

www.laoyoutiao.vip · OpenMinis-1.13-hanli-arm64.apk

/

Hong Kong · cognetcloud INC

Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)

Yara Disable_Defender From AbuseCH by iam-py-test

Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)

Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 63a64817ef57486781050366b685ecf19302649b
SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
application/octet-stream
38.65MB
2026-09-18 19:36:30 +0000 UTC