5e5d22bc2caa7052eab0883a83fc446daef56fc9a3085178c39b42fabc1c066b
H₃(Cm₆Db₄U₄)Md₂
windows Fallout
Recently scanned open-source supply-chain artifacts and public lab uploads.
Files indexed
88,999,504
e2ea0d3817d88d2b445e9266979fbf24cb15e5f517f41e663eee15fa5f288c0a
O₂(C₅Er)H₆(Cm₃CrDb₂F₂OsPo₅)Md₂(Bi)
99%
Encrypted payload dropper with evasion
a06673af1f07487237fe4a60e4a774f4e0f87a19150b0e16ea385caa3cabccb7
✓
K(Li)O₂(CaEu)H₉(Cm₆CrDbDs₂F₄HfMg₂Os₁₁Po₇)Md(Bi)
85%
Wallet seed harvester with exfiltration
dc6d536955d557c5637391dbd88e884cd9a97b15295f9ac6c9bafe87725b83da
H₂(Cm₂F)Md(Pa)
674720a27b8bc8fd2695a1f4951cc0b82c8697497b72d99ed49b289bddd1879e
H₃(Cm₃FOs)Md(Pa)
46%
Legitimate Chocolatey package installer
58928c973bd77cabdf6bca123c77f7915c3f335f42e364893c2673d954d22d93
O₂(AsC)H₂(Db₃Po₂)Md₂(Bi₄Pa)
98%
.NET bitmap stager with reflective loader
4df5ae7b0ef821fbfaae658a6fec8915a9e810173ef0a9c28f9a307c19e16333
H₃(Db₂FU)
9df2603671552b89cdc6d4e5bfb2f97f29b0ca7768f4a0f3c8c28a0b8bd835b5
H₃(Cm₆Db₄U₄)Md₂
85%
Signed PE with embedded shellcode loader
4670e0427d22bce9f17e294bb7da52e17623377269011f9d332c80fe4cabda6a
Md(Pa)
85%
Masquerading PE loader with evasion
15aa295d5813222fa61a93353873700422c64da1580e91cee02681df566829cc
O₂(As₂C)H₂(OsPo)Md₃(PtBiSi₃)
97%
Obfuscated Go loader with direct syscalls
e570bd682a5ae3c496e0333288983b2e04d8b2f2dcb730afdb803d024be60036
H(Cm₂)Md(Pa)
0289686e7bcdf484ad379cbd842581b6d8f990f18e292754820aa01775dc0e8e
H₂(Cm₂Po)
e77b0473ee512fa6121b864bc0e7003ef3fffda2e7a612941a10a8d6c83c68a1
K(Mc)O₂(AsC)H₃(Db₃OsPo)Md₃(Bi₅BkPa)
98%
Reflective loader executes encrypted payload
8c2ca1c6a2ecf606ceb778ecc9928508727dc36598426e958da23b72cb6368e0
✓
K(Te)O₅(CErDyIXe)H₄(Db₃Mg₂Os₆Po₈)Md₂(Bi₄Bk)
85%
Unsigned RMM binary with business lure
d9c79d7405ce4788eb62c384c95e77d153cb23d65883f5e6f0d70b9630a7ab95
H(Cm₂)Md(Pa)
6d060f11dedc4b3b2fd6db53dd0ea1cbe7d8afbf87d631483b165e8a51cfeb05
K(Am)O₃(AsDyEr)H₁₁(Cm₈Cr₂Db₅DsF₉HfMgOs₆Po₁₂TiU)Md₄(Bi₇PaSi₂)
100%
Legitimate portable app installer
f2b90487ccf966408996bd182314719a9be80a95a6e646cf71b98055be58691e
O(As₂)Md(Bi₄)
99%
Packed PE with empty code section
13a7488b780bb3b21c336f303ba3cb0f5852a9bd576a7b5329e3f932a5d4adf0
Md
849da84a25cb0d79bffecae546cd551d3bc24b933b1a7ad55f0374a1ea2741ff
66c8adb759d66aa2e71b393d9761dc26276a5a738cde22373e833e4b605bd41d
9dfb440c62b3f75b1a7706043b38774ee03d0e5122d65f7e9ad953d69a322115
617ce2efa10267f0a70d1f101e77c4165633299bc6e662c1606db9c56b64fe4e
e538183efaea01fe9061b38c9e842e2b8c2a7ced80a695745d292d0a53c254bb
K₂(AmLi₂)O₆(Al₃As₃C₅Co₂Er₃Xe)H₁₁(Cm₂₆Cr₁₁Db₁₃Ds₂F₁₃Hf₃Mg₂Os₁₇Po₁₈Ti₃U₆)Md₆(Bi₉HePa₂Pt)
92%
debugger-detect.tlsdebugger-detect.check
53d826779abf284ea492ff4c09865e1566c3c62836c28d3c5ad7729f0a8d523a
K(Li₂)O₄(C₃EuAs₂Er₃)H₁₀(F₉Cm₁₅Cr₉Db₅DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)
98%
PyInstaller stealer with obfuscated embedded payload
c7fa8bea891d55723ba16507ab4558e7a91cd30b186abf119ff5730c379159bf
H₂(Cm₄F)Md
d57d3fccff0ca055d8e959a4b249d83502b8cd74100d4fd7116be7add1cfcb30
H₅(Cm₂DbFOsU)Md₂(Bi₂Pa)
74%
Legitimate bzip2 compression tools
d52a36015ff689ce6b5fbc0478ef829b8208cb17324e1dc151f76d3982b27766
Md
e1740f0578db16191bca558876cb01dfa768d269c5e735f4f85aba0feb27a7e1
H(Db₂)Md
72d3d2cd4cfecd407a8f37572e0bb01608cd5f18a6521f02fb3033b0c8780e7a
21f02b1aee5e8aacbede1a98a6be0108d253502cf8b5dd93be07ce2b30253f8a
Md
f1299aac53a762281c12f1ffef0fef6e74cbc913fb851d7cc97c7f2a88b9d91a
O₂(As₂C)H₂(OsPo)Md₃(PtBiSi₃)
92%
obfuscator.garbleexecution.windows-loader
029a364b81370e6f680886c2e1a0751cc45d1539db9ef0b9b55265def3422259
O(As₂)Md(Bi₅)
99%
Packed PE with empty code section
27806397c6367d72741f76cbf86dc69eaaefa7195ad2fb2808caa4e4541d37a7
H(Cm₃)Md(Pa)
7124fe5af6c764adc9dfb274efdda72b2205b5bb1c90cfc224e028f3c01455cf
H(Cm₃)Md(Pa)
8083bda9833da6206a28cfc5b4c91a3ac2488d6bcf50d146450aa708413d6886
O₂(As₂C)H(Os)Md₃(PtBiSi₃)
100%
obfuscator.garbleexecution.windows-loader
501cc0d06ebf10f9ec74d1ea2139ffca45631f52b769c6a5712aab160c0d1ffd
K(Li₂)O₄(C₄EuAs₂Er₃)H₁₀(F₉Cm₁₅Cr₉Db₅DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)Th
98%
PyInstaller stealer with obfuscated embedded payload
37ec3d63963bcdeadd8b04425ff3217e83eb53799f7716fd0199051d484c4154
H(Cm₃)Md(Pa)
cb0ba787a6cc7fad31c1588fbb3b4c182622235d3eb94998158acc89b652208b
H(Cm₃)Md(Pa)
924037d098c031bfaecaff406b20f1dfa0b1a0a22fefd3bfc5753513ef67bdda
K₂(McLi)O₃(As₄PCo)H₈(Db₈F₆Cm₄Cr₂DsMgOs₆Po₆)Md₂(Bi₃)Th₃
100%
WannaCry ransomware with embedded payloads
1f285d3b77037633c4a487c206e8db17c7179f5947d08804b6f33958ff2936c6
Md
873a4c37e52d168121354805084d7de678583fe414189a3dfd676108aaa08581
584dc08de60290c555e19759f90ae0314fd2f90dcdaca2392dfdfa376820599f
H₂(Cm₂F)
731fc822a6bdfe76804b1d55fdd08de05680ca6d99bd8c3216a466ece9a3f92b
K(Mc)O₃(As₄PCo)H₇(Db₇F₂Cm₄CrDsOs₃Po₇)Md₂(Bi₅)Th₂
100%
WannaCry ransomware with embedded payloads
27de39c57fbb1f30fe42e6a040991fc5589fc43e686bf3ecd24b11f64303d21b
e6b7a2a07f3f2928860a4dde92372a0cb1bdd2283956a68842e1de83042c54d4
bfeee06a8ed56d497847ccb298dc70744fc7e07fbc657a7ae0e78195402d163f
11dab4308daadc7569ca0ae38faeed467b5108e66efc9272546e302d5281f734
✓
O₂(AlC)H₆(Cm₂Cr₃F₂Os₂PoTi)Md(Bi₂)
85%
Debugger-gated loader with anti-analysis markers
2d373d72472f7d9d11a3fc7d4874cf423b4260bed2e080d745ee127bcef237e6
K(Li₂)O₄(C₄EuAs₂Er₃)H₁₀(F₉Cm₁₅Cr₉Db₆DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₈PaPtSi₂)Th
98%
PyInstaller stealer with obfuscated embedded payload
39ff4fcf81b3f754ed73c2ab999a12bf7ac01e90caff3bee4eeb1ad38924ecd2
K₂(Li₂Te)O₈(Er₃AlAsC₃CoIPrS)H₁₀(Cm₂₃Cr₉Db₇DsF₁₉Mg₃Os₁₀Po₁₆Ti₂U₂)Md₅(Bi₈BkPa₂Si₂)
49%
Legitimate Conan package manager installer
16ed1815989fecd476f7f604221b163cecc925dc0d316f57db6499de15d4db68
K₂(Am₄Li₉)O₁₄(Al₃Er₇EuS₂C₇Ca₂I₃PAs₄Co₆DyLaPr₂Xe)H₁₂(Po₄₄Cm₅₉Cr₁₂Db₃₃Ds₂F₂₈Hf₇Mg₃Os₄₁Ti₃U₁₁)Md₈(Bi₁₂BkLi₂Pa₉Pt₄)
92%
injection.thread-hijackingstealer.keylog
2210d0310610fadfb033ff28fdfe29cdfeb4eecea146148e8b89c03cebe35196
H₃(Cm₃F₂Os)
562a27935ce122902dc996db8fc77d620c935d0b14d09868ea3bfb2e667a484d
K₄(Am₂Li₁₁McTe)O₁₃(Al₂As₅C₄Ca₂Co₇Dy₅ErEu₂I₂P₃Pr₂S₂Xe₃)H₁₂(Cm₅₉Cr₁₄Db₃₈Ds₄F₂₈Hf₈Mg₃Os₄₀Po₄₉Ti₂U₁₂)Md₁₀(Bi₁₃BkInLi₅Pa₁₇Pt₃Si₅)
30%
Legitimate Electron app installer
239dede0d31cb07ddd78d5d521cbf30ae057c695d70fb43c98d3a70b112e5fd0
K(Li₂)O₄(C₄EuAs₂Er₃)H₁₀(F₉Cm₁₅Cr₉Db₆DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)Th
92%
staging.embeddedstealer.package
b6e8a5879b258d0cd5be2622268e74988fe62b60213457f63c66b03722a9720e
H₃(CmF₂Os)Md(Pa)
49b8bb81910874e4bcae5f42caeb7b827f711248f8b3c61a809d82b1b9fb7314
H(Cm₂)Md(Pa)
e72fdc7480e073e93674173146c26025d9bdae57675d47785a39faff5aa56bd0
O₃(PCaDy)H₄(CmDbF₄Os₄)
54%
scheduled-task.cli
88204558a9ad71871e1ba9fd79b633bd270ea7561e4760d7c06415f7e9ccdc6c
H₄(Cm₆F₅OsPo)
68%
Legitimate Neo4j installer script
50b3717c6e0900faf8b26be9e10125d10bffebe8186bee005e32c00382ba1753
Md(Pa)
e4f8deabd382de8e644efb4828b5bbd0a294028a95cae69ef77f6262c3aabcb2
H₂(Cm₃)
e84ff68be5a243a18c7f4572aa352d56c9d1b0ada4314b280ef41586f601e52e
fe281924c7ad9c7c970cc56c2737114b450f1e085929a1878b446788f411081d
c10869fcdb9134219e277802b2f245aa3c486713f9a51db5bea4d48ac6591e05
e6bf890d5f09faa284e497ca0f6fcadd1f8e9e43aecb9e54f914ed84d2aad5c9
H(Db)
7c3c4b811faa2e2206524e474b7029abf6146d43e4110b63293f0cd124453a44
K₃(AmLi₁₄Te₂)O₁₂(Al₄As₅S₇C₄CoDy₂Er₂EuIP₂Pr₂Xe)H₁₂(Cm₅₆Cr₁₃Db₃₂Ds₂F₃₇Hf₆Mg₂Os₃₇Po₄₈Ti₂U₉)Md₁₀(Pa₂₂Bi₈BkInLi₅Pt₂Si₄)
debugger-detect.tlssupply-chain.typosquat
dcbe0581b28998d0678c9cf6b416288e5c5165eca9ace75198c489d1016468c8
H₂(DbOs)
db033728661f8fec34cecc14d32d3c4f27a7d06068197848d204aa8b305dd6c9
Md(Pa)
db80acc7fcc99bb9e6bfeb16da41a412ac6f2e0c32f71f8b79276a13bc5ef823
d5c58007f55abb6a0a1efa40d35598e49dac9546fb1d4b9b5f8a18982ee135ce
c153d5b6e2ddaaf3b7ca88af1a270e32685b137b46f73100e7755e2df7fd12e3
H(Hf)
c501fd1b69b06c98884855a29a846a118668592cc97a7ca3b76a045984bd0a6d
04ca179e7d104d3aae58972e395a749d13fad1ae2ae1dd9e27f7bc1c5466f845
aa3b195fcab58f51ba95e2f5a45c9fe013e5c18c85446c434fca5ba65ee523cf
Md(Pa)
a512dc2e28074e30a0d8af9043834053b24ff90f997a0291e7a6b626ecf13b41
a9dec1b12002ab10dc21c480edef26550656bca182aa27d42f8d3a894fa029f0
H(Db)
a00efa71cdc3c053938c24d1e20cf991623b0b58399c4365deaa43c933e02812
9e44b25a6c024358e11c86cda6b59cb07375ce7251be066d4fb350adf209d421
Md(Pa₃)
9e710b97571fa815460a8583c1308dba511ddbb010c2f25c013a4e2bac786c74
H₂(FU)
94046094cd7283784e3090dac6397a84cd624604e88e5f78c3a6f50f43704b2d
8b5ae56826b36bf766e10b2965c576e8fe6de414686bab349fc77111672c020d
88390d285fc52da5a5fc0d7395fe95ce27e163bffd9e5eef988a23882e55bbd6
8164ca7f18010d429461b2cceaf5de0d8a43bb783e4e7951acae47c30dcdd348
O(As)H₄(Db₂F₃OsPo₄)Md₃(InPaPt)
84494fb8646ae7767ec6eceb2b6627fa6b86c571000a73337676f0bd558f4921
8177978a6a37d3da68c18db2819e9f4b5506d9a9226fa6976fdb12de120d8409
H(Cm)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(Pa)