| 0097150be945c41e… | XScan17901RF.JS | js | XWorm | 2026-09-17 | 3,779,707 B |
| b427e3fdb41eaa0c… | scan_docs.js | js | RemcosRAT | 2026-09-15 | 1,505,141 B |
| 29ec5bd0ea2d97f0… | ScanFIV-FMA-6349 - 01revCopies09092026.p | js | RemcosRAT | 2026-09-13 | 4,754,962 B |
| 295fd997fff27d84… | Pre arrival Kiel Canal.xls | xls | - | 2026-09-12 | 1,956,352 B |
| e7a41ed98a7fdf00… | scan_docs.hta | hta | XWorm | 2026-09-09 | 661,356 B |
| c75677a9585855ec… | Customer Scanned TT Copy 927353663_11_06 | js | Formbook | 2026-09-07 | 3,999,811 B |
| 4f72ba825134a9f2… | Scan Canon 20260609 0001.pdf.JS | js | - | 2026-09-06 | 3,375,359 B |
| 48fbd29ed74798f1… | Scan2026-09-03_095840.pdf.js | js | - | 2026-09-04 | 387,905 B |
| c917b69a47f36c55… | SCAN COPY AUGUST 2702026.js | js | XWorm | 2026-08-27 | 437,367 B |
| fe15b526b674c2dc… | scan_copy_20260824085.vbs | vbs | XWorm | 2026-08-26 | 1,266,244 B |
| ab331aadbc162a4c… | Scan Copy#08-25-2026.js | js | Formbook | 2026-08-25 | 602,666 B |
| 9f288a6b4086fb6e… | z73scan_copy_20260824085.vbs | vbs | - | 2026-08-24 | 1,210,304 B |
| 9bd6b5300b97ab25… | z28scan_copy_20260824085.vbs | vbs | - | 2026-08-24 | 1,298,909 B |
| 1b8c8ea5208de30f… | Scan_0001.pdf.JS | js | XWorm | 2026-08-24 | 3,094,429 B |
| 12c2152d740d0799… | Scan00922718082026OutputACK-ref18082026C | js | RemcosRAT | 2026-08-19 | 4,712,048 B |
| 79eccb23f5823ba2… | Scan_8287585933.JS | js | XWorm | 2026-08-18 | 3,041,781 B |
| 78aa211440dc945f… | SCANNED_DOCUMENT_HSBC_PAYMENT_COPY_pdf.J | js | Formbook | 2026-08-17 | 3,931,565 B |
| ebd9e7cb52ae723f… | SCANNED_HSBC AUSTRALIA CUSTOMER_PAYMENT_ | js | Formbook | 2026-08-13 | 3,166,929 B |
| 1e17f7e1abf637c2… | SCANNED_DOCUMENT_HSBC CUSTOMER_PAYMENT_C | js | Formbook | 2026-08-12 | 3,105,771 B |
| ba83558b7f966c94… | CamScanner 11-08-2026 12.29.JS | js | XWorm | 2026-08-12 | 2,594,422 B |
| 0c4cc485970a7b2a… | Scandoc#767.bat | bat | - | 2026-08-11 | 39,725 B |
| 8e6c4413e352fa11… | JUSTIFICANTE.JS | js | AgentTesla | 2026-08-11 | 3,052,462 B |
| 8b0bb035d13376c7… | ScannedDocument_LX_BfyxdanP55dD.js | js | RemcosRAT | 2026-08-11 | 1,155,947 B |
| 45b1296b5c7de2b1… | XSCAN-POB260728157.JS | js | XWorm | 2026-08-11 | 2,271,838 B |
| 03c07c02503cd44b… | scan_20261112154840204.pdf.js | js | XWorm | 2026-08-07 | 56,472 B |
| 62777784d0ae13dd… | DOCUMENTO ESCANEADO.PDF.js | js | XWorm | 2026-08-07 | 55,842 B |
| c8f5154d26623410… | documento escaneado.js | js | XWorm | 2026-07-30 | 2,263,528 B |
| 2c620e407eabb93d… | scan02_ Shipping documents.vbs | vbs | RemcosRAT | 2026-07-28 | 276,196 B |
| 0b2fed30ecb51f8d… | scandoc12.vbs | vbs | - | 2026-07-24 | 19,001 B |
| 55ea3e4e1cded44b… | documento escaneado.js | js | XWorm | 2026-07-14 | 1,661,532 B |
| 9052aa35e9f8dde4… | 09072026scan_20260709140010.jpg.js | js | XWorm | 2026-07-11 | 59,477 B |
| 83ed44068b1fec44… | DOCUMENTO ESCANEADO.js | js | XWorm | 2026-07-08 | 1,788,451 B |
| ffa6334625c7613e… | Scan_doc20260702480092113466755430000001 | exe | XWorm | 2026-07-03 | 925,696 B |
| 1145e36db0b83afa… | SCAN_DOC_FILE_PR_0001000265.rar | rar | XWorm | 2026-07-03 | 882,254 B |
| ddfbf3db2b7e15b8… | SCAN DOC FILE PR 0001000265.JS | js | XWorm | 2026-07-01 | 4,186,364 B |
| 218f0057a8109666… | Arcane.exe | exe | Vidar | 2026-06-30 | 2,963,344 B |
| dc493320d623d5ee… | Scan docs.xls | xls | RemcosRAT | 2026-06-16 | 620,544 B |
| fbf9aa57bc628c26… | Request_Inv001_File_details_scanned_page | vbs | - | 2026-06-16 | 51,887 B |
| 02b43188eb8c7538… | SCANDOC156.vbs | vbs | PythonStealer | 2026-06-15 | 350,644 B |
| 8be9560f26392b4e… | RFQ# 06142026-SCAN.JS | js | XWorm | 2026-06-15 | 2,865,632 B |
| 6a2190283ef6a158… | SCANDOC24626.vbs | vbs | PhantomStealer | 2026-06-04 | 446,394 B |
| 3d57334d08deff6d… | SCAN DOC LOI.r00 | r00 | RemcosRAT | 2026-06-04 | 1,295,510 B |
| 288e9320f7582f38… | SCAN 654HG - TYS SG _ pdf.JS | js | XWorm | 2026-06-04 | 3,668,552 B |
| 4ac28f1f5fe3915b… | ifghellas_Scan.JS | js | XWorm | 2026-06-04 | 3,655,806 B |
| 252727b6682eb8a4… | scan.vbs | vbs | RemcosRAT | 2026-06-02 | 84,834 B |
| d1a95901bdcfcc33… | SCAN.bat | bat | VIPKeylogger | 2026-06-01 | 4,067 B |
| d702322e43f46816… | SCANDOC275.vbs | vbs | AgentTesla | 2026-05-28 | 425,370 B |
| f33a280f75a09f8b… | _VT_172.234.217.133_200_seewecanviewthep | vbs | - | 2026-05-21 | 65,956 B |
| bb6ed91616f9c3fd… | WORKXREPORTXFORXYOURXFILLINGXANDXSUBMITT | rar | njrat | 2026-05-21 | 662,411 B |
| 59b24c1e23935d27… | Justificante_pago-22656434687.rar | rar | GuLoader | 2026-05-21 | 1,044,966 B |