| d1bb6e69ec1d9e53… | mpclient.dll | exe | Vidar | 2026-09-08 | 3,861,600 B |
| 550b393f4daf05fc… | 550b393f4daf05fc157782cb6e6ee783a7cbe88b | exe | Vidar | 2026-09-08 | 7,008,256 B |
| f1142e07e25d8178… | f1142e07e25d8178dfddd10b442f12a14b920c13 | exe | Vidar | 2026-09-08 | 4,759,552 B |
| f601cde9845b729d… | f601cde9845b729dcbbcd0b8b972baff995c8ed2 | exe | Vidar | 2026-09-08 | 4,734,976 B |
| 976eb41511fdcb1b… | 976eb41511fdcb1b13af671b963aca873d183085 | exe | njrat | 2026-09-08 | 48,640 B |
| 4764bcd6e6c4ac95… | adi.icsvn.info.apk | apk | IRATA | 2026-09-07 | 5,256,168 B |
| 68ce835a70760369… | NordVPN_Бесплатный.vpn (3).apk | apk | - | 2026-09-07 | 4,754,597 B |
| b55a6b2552471e55… | mrcrabs.ps1 | ps1 | - | 2026-09-07 | 55 B |
| 1f0872fbe0536e3b… | run.ps1 | ps1 | - | 2026-09-07 | 32 B |
| 38409a3e899ef9eb… | ginx_arm64.zip | ps1 | KongTuke | 2026-09-07 | 910 B |
| 34dfe9e3c9ca8727… | code.ps1 | ps1 | SalatStealer | 2026-09-07 | 29 B |
| 26702ebaf4354383… | Inspection Papers.vbs | vbs | - | 2026-09-07 | 40,291 B |
| 9f3f058e10ede2da… | Family itinerary file.vbs | vbs | AgentTesla | 2026-09-07 | 24,012 B |
| dd4d50ce92e68f93… | DOC269788-6786.xls.vbs | vbs | Formbook | 2026-09-07 | 925,527 B |
| bb5f221bcaacb677… | Family itinerary file.vbs | vbs | AgentTesla | 2026-09-07 | 25,085 B |
| 2d4d3b4fc1426503… | streamyard_MSupdate.vbs | vbs | - | 2026-09-07 | 9,097 B |
| 82bdf2586c0f7b37… | SOAStatement-WEBBEDSTVLEETBooking #00012 | js | RemcosRAT | 2026-09-07 | 5,507,105 B |
| c0fdf9d2bccc7365… | MV_GREEN_GEM_APPOINTMENT_LETTER.js | js | Formbook | 2026-09-07 | 3,107,802 B |
| 1f9fbcfd3c51f439… | ASYKHN-98778900.js | js | AsyncRAT | 2026-09-07 | 1,134,110 B |
| f9e707624adcfde3… | Payment Advice -Demurrage PDF.js | js | AsyncRAT | 2026-09-07 | 177,135 B |
| a008c730d12c466d… | Doc 001886_1308002341 Pdf.JS | js | Formbook | 2026-09-07 | 3,994,355 B |
| de44ed664d714513… | Azotny Zavod LLP_Order_179540839070926_x | js | LxBaseRAT | 2026-09-07 | 1,016,926 B |
| f9b765f84e09fa92… | Details and Specification for Bulk Order | js | RemcosRAT | 2026-09-07 | 974,164 B |
| 6c54e6c858435789… | DN.js | js | VIPKeylogger | 2026-09-07 | 1,517,260 B |
| 1b9e2a4309c507d4… | RFQ N° 024VOLAOO2026 SUPPLY.js | js | RemcosRAT | 2026-09-07 | 1,108,315 B |
| 5140eeae10baf5a6… | RFQ-4521132_Bardia-Control-System_xlsx.j | js | LxBaseRAT | 2026-09-07 | 1,008,479 B |
| 087d930b6d5f5f7d… | FWF-AIR-I_2603002_1_OTW265018_pdf.js | js | PureLogsStealer | 2026-09-07 | 488,316 B |
| 0830ecfcff892e20… | Doc 0018861308002341c.JS | js | Formbook | 2026-09-07 | 3,990,707 B |
| 8854042215232a9c… | Request for urgent quation.JS | js | AgentTesla | 2026-09-07 | 4,101,721 B |
| 217444a06c03d3cf… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-07 | 42,805,818 B |
| 6ae66766c94de8aa… | UPA2609203 订舱单及收货人详情.xls.js | js | Formbook | 2026-09-07 | 3,117,382 B |
| 551edb3338a4e293… | #ANT675RF.JS | js | AgentTesla | 2026-09-07 | 5,239,916 B |
| 79ccd5301a7fa1b4… | Purchase Order – PO-KE-2026-0841.JS | js | AgentTesla | 2026-09-07 | 5,241,724 B |
| 021674c4b4120696… | RFQ_Specification_Quantity #090726_PDF.J | js | Formbook | 2026-09-07 | 3,999,811 B |
| c75677a9585855ec… | Customer Scanned TT Copy 927353663_11_06 | js | Formbook | 2026-09-07 | 3,999,811 B |
| f9dad0a79b3e09dc… | sample order AMP.JS | js | MassLogger | 2026-09-07 | 4,701,052 B |
| 2bfa50253271879f… | Confirmación de pago.js | js | AgentTesla | 2026-09-07 | 289,895 B |
| d97dae8f8aafa75d… | REQUEST FOR QUOTATION OF RFQ-0199A-07-09 | js | VIPKeylogger | 2026-09-07 | 21,847 B |
| 259dd842a2672a55… | offlinejs.js | js | AsyncRAT | 2026-09-07 | 628,762 B |
| bda30364f197a18d… | Details and Specification for Bulk Order | js | RemcosRAT | 2026-09-07 | 494,104 B |
| 8dd315436f3c560a… | Halkbank.pdf.js | js | AsyncRAT | 2026-09-07 | 218,839 B |
| 49412a072b30d8b8… | Specifications_QU070926.JS | js | PhantomStealer | 2026-09-07 | 4,715,209 B |
| 2c292220707ae3a2… | jkBPvYJsev.js | js | AsyncRAT | 2026-09-07 | 207,457 B |
| 98e7319969ae2852… | Remittance_Advice_MT103.js | js | AgentTesla | 2026-09-07 | 1,422,669 B |
| 67c2a42845403c19… | ORDER_QUOTATION_FORMpdf.js | js | Formbook | 2026-09-07 | 3,105,436 B |
| 7ffb3901f69e4731… | ZIRAAT BANKASI PAYMENT CONFIRMATION COPY | js | RemcosRAT | 2026-09-07 | 5,134,244 B |
| 09c0a85c2d352cf5… | COTIZACIÓN INV00956897.js | js | MassLogger | 2026-09-07 | 952,346 B |
| b9d5e9c5e18ca9ea… | Solicitud de cotización - Seiza.js | js | AsyncRAT | 2026-09-07 | 207,255 B |
| 26c943f3aa16db46… | LPBIR0013709.js | js | Formbook | 2026-09-07 | 577,487 B |
| 91e05a06b2e8f9b6… | AGR2208289694.DOCX.js | js | PureLogsStealer | 2026-09-07 | 475,484 B |