33035b55edf9248a10eab17e25d399144a7222d9f36f90e52b00056e982d1dde
H₆(Db₂F₂Mg₂Os₆Po₆U)Md₄(Bi₆PaSi₂)
windows Fallout
Recently scanned open-source supply-chain artifacts and public lab uploads.
Files indexed
88,999,504
3d620693b4c7ba4a82a380843dc43953dcd091203f6cffb8f4160074c6a3ce3f
O₅(CEr₂P₂AsI)H₇(DbDsF₈HfOs₇Po₆U)Md₃(Bi₄PaPt)
99%
IExpress dropper with encrypted AutoIt payload
13589679f87696c61d4630c870b5b8be347d37e0134bffec7e7f3941c692c73c
O₄(AlCErI)H₅(DbF₆Os₆Po₄U)Md₃(Bi₄BkPa)
92%
sandbox-detect.suiteexecution.installer
933f3950919cba8b7412b978161db18dbb1f86346799291703ce3d4de8e5160c
H₂(Cm₃F)Md(Pa)
88875d1fb9dedc9325afb9d58f2706255c0b9b2b253797876ec08f876de8ed26
H₂(Cm₃F₂)Md(Pa)
9cbed30e81768fc40236e3c082076588c05c5aee4dcc954a4fb9582d04f95fa0
K(Am)H₃(Db₂Os₂Po)Md₃(Bi₄Pa₂Si₂)
1423d934cff86c7d49cbb0fa82af5028a1c64cebbb99798a578a2663a47173f6
K₂(Li₅Te₃)O₁₀(As₆C₇Er₇P₂Ca₂CoDy₅I₃Pr₂Xe)H₁₁(Cm₃₈F₂₂Os₃₆Po₂₄Cr₈Db₁₁DsHf₅Mg₃Ti₂U₈)Md₇(Bi₁₃BkPa₂Pt₂Si₂)
54%
registry.surfaceip.spoof
345240e38da586f23864bbfed86c250f2cfb435f4e397d43495901e78a356535
O₂(AlC)H₈(CmCr₂Db₄F₂Mg₂Os₆Po₆U)Md₃(Bi₅PaSi₂)
49%
Legitimate GitLab installer
72884427e9404acc2d8059a168e54e7a981060280e29a9d50dbdc36f0cc7689a
H(Cm₂)
7a0a53b706852bcdaacf7ca6b7435f41cfc190b46b78421d94a1f01e5fa19b49
eb3ea58ca419795d913869e79f99549378622e682d2bed493383357e2d4b7ade
H(Cm₂)Md(Pa)
8596a535fec6c3ff104c7dfe30ba559c7ddc022a3252d3fce52c1eabf8bd5620
H(Cm₂)Md(Pa)
85130dba0d0d6e16f90924a857339f2c11ec6d888ac32a45d84e4bc93c89767e
H₂(CmF₂)
6a2de8f8876370a7b1b21d3d78aadba95adb9d9cd81e52c33ab819e6715c8ec8
O₂(AsI)H₅(Db₂F₆Os₄Po₄U)Md₄(Bi₃PaSi₂)
77%
Legitimate Firefox Portable installer
4c897108e8e793d6904110928c996815c302d6975c9bc61162149e855a963d50
O₃(Co₃Er₂C)H₉(CmDbFHf₂Mg₂Os₇Po₅TiU₅)Md₃(Bi₂PaSi₃)
92%
screenshot.capturekeylog.hook
c23e50092e0741fcc9927eaa26c565d7238f0c72d5c960169cd7838b387ead11
K(Li₂)O₅(C₄EuAs₂Er₃Co)H₁₀(F₉Cm₁₆Cr₉Db₆DsMg₃Os₁₆Po₁₇Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)Th
98%
PyInstaller stealer with obfuscated sidecars
75a0d2b32af70bcbffb8ed27215b60c924efd460a85cd21013fc1b83e1d2fdc8
O₃(As₂ErPr)H₅(Db₄FMg₂Os₇Po₇)Md(Bi₃)
99%
Concealed PE payload with anti-debugging
16b42c88cc7140522e273071df1eb98f02850d6a69a4ffbe20b7cd388063ab16
O₅(CErP₂AsI)H₇(DbDsF₈HfOs₇Po₆U)Md₄(Bi₆PaPtSi₂)
92%
execution.self-extractidentity.fabricated
ef8f821a54f3f07ae8036c005c7656aa755f8078de6c70a1a8f72ebafe35fe69
K(Mc)O₂(As₂C)H₂(Db₃Po)Md₃(Bi₃BkPa)
98%
Reflective loader with encrypted resource stager
f591d2dc7ab7cc11080dabdd78dde907d12739106da9f8b8caa8277fe40ff26a
7271465271b813b55274e4b65cd8b5f9c90ec054f7efbac4dfaa58397a0499b4
H₃(Cm₃DbF₂)
48%
Legitimate package installer script
8201e86cec895318997891753bfca70f0f5dddf731cfcb1cafaacbd661fda51f
f1ad93043bf5f7ee23072420db7cf08fa9e589da1f22c050f3edc06e250af53e
H(Cm₂)
fb394376852301845e920428dcf27b5f19ea2c429c5b10f5bf99c0513f8020d5
H(Cm₂)Md(Pa)
26861b70a4608bdbf702598ea84a4f09103df8304e943117440b75e1e51803bd
K(Li₂)O₄(C₅EuAs₂Er₄)H₁₀(F₉Cm₁₆Cr₉Db₆DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₆PaPt₂Si₂)Th
99%
PyInstaller stealer with obfuscated C2 payload
a1dd3cc8b969c6487acb0ecee7419574648f533396cfd9af88fe68631307f13c
K₄(Am₂Li₁₁McTe)O₁₃(Al₄Co₆C₆P₃S₄As₅Ca₂Dy₅ErEu₂I₂Pr₂Xe₃)H₁₂(Cm₆₁Cr₁₄Db₃₇Ds₄F₂₈Hf₈Mg₃Os₄₀Po₄₉Ti₂U₁₂)Md₁₀(Bi₁₃BkInLi₅Pa₁₇Pt₃Si₅)
92%
keylog.capturedebugger-detect.tls
f0c4f4c6a6a6fbd84ec71e340136582529353fd13399913c107538af971f5321
K(Am)O₂(AlC)H₈(CmCr₂Db₄F₂Mg₂Os₆Po₆U)Md₃(Bi₅PaSi₂)
92%
debugger-detect.checkstaging.embedded
a36097bc4e1f0868448bba2e3b5d6ebc21ec715579bc59da3b1f36375bb642dc
836d18ddae8a91b1ce6a2d79722f7115ee3b0358060160c585ff2c891023883c
K₂(McLi)O₇(As₅Al₂C₂PCoErEu)H₈(Db₇F₆Cm₅Cr₂DsMg₂Os₆Po₆)Md₃(Bi₃Pa)Th₃
100%
WannaCry ransomware binary detected
9714f79bb2296d3108cbf1c692bef6578e65bff5d17a80df942bbec516b45c84
O₄(As₃C₂Er₂Pr)H₅(Cm₂Cr₂Db₅FPo)Md₂(BiPa)
99%
Reflective loader with encrypted payload
d3a77efd9b454c113b91535987010bf93df630ef63e51fbe599321e2bc399024
✓
O₂(AlAs)H₄(CmDbHfOs₂)Md₃(Bi₄BkPa)
85%
Packed PE with admin privileges
68c2f053620052463b25c1fb9232a63bbc69f8bb7b46e4fa941e1512c0ea807c
H₄(Cm₂FOsPo)Md(Pa)
43%
Official Kibana Chocolatey package
10e06b5be9c382810757bf0d58872392c8d2e50fed5036ffc5ec458de0200fb8
K(Li₂)O₄(C₅EuAs₂Er₃)H₁₀(F₉Cm₁₆Cr₉Db₆DsMg₃Os₁₆Po₁₇Ti₂U₂)Md₆(Bi₇PaPtSi₂)Th
99%
PyInstaller stealer with obfuscated embedded payload
f507ac7d23bb4e553de1397a3c5cfe49738d55482f6d03675cad7a347609a517
O₈(P₇C₂CoLaAlDyEr₂Pr)H₆(Cm₆Cr₂F₇MgOs₉Po₆)Md(Bi₂)
97%
Malware loader with persistence and evasion
7df7a40a51aa88fe0c97e946dfd2b882b6ac98007235a07579369df985d3eefd
O(As)H₇(Cm₂Db₃F₃MgOs₇Po₅U)Md₃(Bi₄Si₂)
55%
Legitimate Postman installer binary
714a8c2377048a565410537fa1985025ce8422f03cf67730c77c4f7443881fff
O₃(P₃CDy)H₄(Cm₂F₂Os₄Po₂)Md(Pa)
54%
scheduled-task.intervalscheduled-task.cli
166187e44dfcc3da68a739ea4624ec7fc226e70c2220dde8ece85eccffe1e20b
H(Cm)
a4c971de5e0df85d64104aea49e6e3954a296bcee784063baa16b2badeda0682
H(Cm)
48d77a2a197e7f2ec54c73204b5ab68fdaa69c95d70cc0212ea51ddd0b932c5f
H(Cm)
13f881b8b8ef0a192bafe8db8f921e80660e3e4ba3ea3002bbf618fc10570f34
H(Cm)
418b6e4959d312c2e071f23d09885a157e442c6da028b78de7401c81ca605dd9
H(Cm)
b0d61041355dbc703158f897bdca9c4087e93ac2bf201c0902fbe69f68dee2e6
H(Cm)
f109e5fa35f20e82409f99d3bcd1218ed5b2f8c1835bcd0bccd206703e814ab9
H(Cm)
31b25e5ea3436800f70c904217a42d91d2566dfd12db86f8145de12a405a0406
d7537ee7a43cfc1a462753dd7dbc8a97de4845ad3d23b4db99dff813e99282d9
H(Cm₂)
040a3f510bb5330f0f4de8f5dfa0aa999c1dba82fd4395a443f953cf5a31d5eb
H(Cm₂)
862effa5326b433d341925a05916782bd76948800315bc2e38c92ee6fb4ff867
7c7afd804357d9fc9faae39286ac5e0b754bc3e44f3ed4d10e4e9cfe73eb25c3
ca7f89ffde9cfb864f36115de8b0876e8c8084745ee59697de16425299954a7b
27bd3e0e0b8cd188a9f6d97615bed56266de785b198fe4ef74fae5f4c354493b
100%
downloads and executes remote code
8d5ad5276e320486c83b30b4a13e056769882ad2ab052c515a258daeed16ff76
K₂(Li₂Te)O₄(C₃EuAs₂Er₃)H₁₀(F₉Cm₁₅Cr₉Db₅DsMg₃Os₁₆Po₁₆Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)Th
98%
PyInstaller stealer with obfuscated embedded payload
6ec47a67ccca5c2254f8034bc6f7ddbdd299097de2028f637f24fbeb8879674f
O₂(AlEr₂)H₅(Db₃FMg₂Os₇Po₇)Md(Bi₄)
92%
injection.thread-hijackingfingerprinting.host-bound
150bccbde3ba9db9347f5e41984ac9643f860ab423c62376cdafc031c2e8458e
O₄(CErDy₂P₃)H₅(Cm₇DbF₂Os₆Po₄)
99%
Dropper with persistence and hidden payload
a19d356251a87c785bcef042bbfe0e0bff1a908fb2a5bf095c4df04d6a5bc0df
O₂(As₃Er₂)H₄(Cr₃Db₄OsPo₂)Md₄(Bi₃BkPaPt)Th
99%
Reflective loader with process injection capabilities
85f65530c628705e94bb13acb1918c404d31ab272dc387ebd4ffa7ee82857b84
K(Li)O₅(PrS₂CaCoEu)H₁₁(Cm₆Cr₂Db₃DsF₉HfMg₂Os₁₀Po₁₁TiU₃)Md₃(Bi₄BkPa)
92%
app.frameworkprivilege-escalation.token-manipulation
ae98e07b2d9c871c42e65d2d55a413049f809defdb0b349cdfadbbe4ef758664
K(Li₃)O₅(As₃AlCErLa)H₁₀(Cm₂₄Cr₁₅Db₉F₈HfMgOs₁₈Po₁₈TiU₂)Md₅(Bi₈Si₂)
40%
Legitimate Hasura CLI with embedded Node.js
7320e51dad1607f61cdc2c4a9df2a6d057e95e8617af091ddb97ddc7e1ce243a
K(Li₂)O₄(C₅EuAs₃Er₃)H₁₀(F₉Cm₁₆Cr₉Db₅DsMg₃Os₁₆Po₁₇Ti₂U₂)Md₆(Bi₇PaPt₂Si₂)Th
99%
PyInstaller stealer with obfuscated embedded payload
f98e46fd4392e8f862317cf7a7ff96f92ddbb8f6399d9ba89f55e34bc131fe89
O₂(As₂Er)H₂(DbOs)Md₃(PtBiSi₃)
98%
Go shellcode loader with obfuscation
592f4bdd91d3900fe56b4c03eb08214cc37f0cbed7d2d5d522af7497da013f14
H₃(Cm₂F₂Po)
c394b09989c31d4f1c9f73a806458159c1df03132ae97f578abe43b56fa832fc
O₄(PrEr₂DyXe)H₄(Db₃Mg₂Os₇Po₈)Md₂(Bi₄Bk)
92%
privilege-escalation.process-injectionfile.lure
e8ad7d0d9be46af828b1207941043e00f77c09fca2a35ad9b4682d8dbd2fe22a
H₂(Cm₂F)
05ad4147c6535984692f1513d6793896900a72371c44fe452670955cf500e1f4
O(Ca)H₆(Cm₈Cr₆DbFOs₃Po₇)Md₂(Bi₂)
38%
Legitimate terminal file manager binary
8be7138281198171a273771cc76d54ab7fada49ed202c78756811e925221ee14
H₈(CmCr₂Db₅F₂Mg₂Os₆Po₆U)Md₂(Bi₆Pa)
74%
Legitimate Inno Setup installer
85%
Trojan dropper with process injection
979ee8f439e497b939debb5c8cb56aa7dbca33e6d586ee9e4c32f0a36a3828cf
H(Cm₃)Md(Pa)
e52a966cd65e01d52ee5004bfdf05ec9f79250ac51e843083183a70f20896280
O₂(AsS)Md(Pa)
92%
hidden-payload.stagingpayload.encrypted
2bb2cf7acec5f05edac84d7fd457b1fb249dbea432917706b6bb898cea2902e2
K(Li₂)O₄(C₅EuAs₂Er₃)H₁₀(F₉Cm₁₆Cr₉Db₆DsMg₃Os₁₆Po₁₇Ti₂U₂)Md₆(Bi₇PaPtSi₂)Th
92%
staging.embeddedstealer.package
761fbd154d7bedf7c98651cef392d61ee3cba85b702fb489ea0190fc99dba7e4
K(Am)O₄(CErLaS)H₆(Cm₁₂Cr₆Db₁₀F₂Os₃Po₅)Md₃(Bi)
49%
Legitimate proxy API server binary
9809c52d981b109abdb2ac13b233cd5b95aa9390023e6dd287856b4a7791db93
H(Cm₃)
85%
PE dropper with obfuscated WSH payload
85%
Cracked software dropper with encrypted payload
62cccbccb8c4076d9f402c6855ce1ff7983544effefdc0948d9c44917548e452
H₂(CmF)Md(Pa)
a95fcee3314cd8b65acd09c3020e427abef5f8e4cee16bd9f8c6f835942bae7f
H(Cm₂)
8981f88f636eeecc37d383a89db09e8d91cc638454d36e6970a5d7df91f8db30
O₃(AsCEr)H₂(OsPo)Md₃(PtBiSi₃)
92%
obfuscator.garbleinjection.shellcode
ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13da69200a3cc1663f
O₃(AsCI)H₃(Db₃PoTi)Md₄(Bi₄BkPa)
92%
pack.runtimestaging.memory
200d998427ae5e0ea0a05cadd5ab2261258b047b6a976e1a25d6f81e1961ae3a
O₂(As₂Er₂)H₂(DbOs)Md₃(Bi₃BkPa)
92%
identity.fabricatedpack.detect
c32312708ddb3969f7b569018700e54b7a1bebb9b411e07c272ca6391bab1cf5
O₃(As₂C₂Er)H₂(Db₃Po)Md₃(Bi₄BkPa)
92%
pack.runtimestaging.memory
80648786527c1289f77aeb94d6ceb180a9c02502086f1c8b75a121fdcb567283
H₂(CmF)Md(Pa)
8ec1b728360eb2a9a175902efdccf4059315cc57021ab413fd9795053af1f496
O(S)H₆(CmCrDbF₂Os₃Po₃)Md₂(BiPa)
b4a1fc36a4ed48c7e50f5b9a403866390fd925c50ae002932e0c9ed203bac7bf
K₂(Li₂Te)O₄(C₃Er₃IPr)H₁₀(Cm₂₂Cr₈Db₆DsF₁₈Mg₄Os₁₈Po₁₉Ti₂U₂)Md₄(Bi₆Pa₃Si₂)Th
50%
Legitimate PyInstaller bundled Python application
ceaa9aa06a16e30f4bb7766e90faa003b19146b3bcdce86f29c3527f648a170d
O₁₀(CCoAl₂Ca₃ErI₃AsDyEu₂Xe)H₉(Cm₇Cr₄Db₉F₈Hf₂Mg₂Os₈Po₉U)Md₂(Bi₂Pt)Th₂
100%
Data.Storeclipboard.capture
14967b7eaa3bc959adf0f0345d88561aca5cff9519e72b698facf5c569bfc48d
O₉(Co₂Al₂Ca₄ErI₃AsDyEu₂Xe)H₉(Hf₃Cm₇Cr₄Db₈F₉Mg₂Os₈Po₉U)Md₃(Bi₂Pt)Th₂
100%
Data.Storestealer.browser
c6a65f9c166de99dfa06725fb940610fc4d20a5a3c6f3f7ef6c8c75af058572b
K₂(Li₂Te)O₄(C₃Er₃IPr)H₁₀(Cm₂₂Cr₈Db₆DsF₁₈Mg₄Os₁₈Po₁₉Ti₂U₂)Md₄(Bi₆Pa₃Si₂)Th
50%
Legitimate PyInstaller-bundled Python application
d8ce33438a1a72f151854f7a97cd4fbfb8ddddb0ac6b2d9db5b2615d607f971c
O₁₀(C₂CoAl₂Ca₃ErI₃AsDyEu₂Xe)H₉(Cm₇Cr₃Db₉F₈Hf₂Mg₂Os₈Po₁₀U)Md₂(Bi₂Pt)Th₂
100%
Phantom Stealer malware with embedded payloads
100%
Powershell script with suspicious header
bed2ef4a7eda0ae05e5939006205b4e4adbddda5f9572de645f868ab90c19714
K(Li₂)O₄(C₄EuAs₂Er₃)H₁₀(F₉Cm₁₆Cr₉Db₅DsMg₃Os₁₆Po₁₇Ti₂U₂)Md₆(Bi₈PaPt₂Si₂)Th
92%
stealer.packagestaging.embedded
85%
Unsigned loader with anti-analysis evasion
dc6c175fa649da5a41c2ec2f8c76156e53a2eb39b3df9f9d79952c417d76a65d
O₂(As₃Er₂)H₄(Cr₂Db₄OsPo₂)Md₄(Bi₂BkPaPt)Th
99%
Reflective loader with process injection
9ceeacd7f64359972fc44c73798a4e215effeff4bda4f6e309bedc67bc0c8d38
O₄(Er₃CXe₂Co)H₉(Cm₂Db₃F₉HfMgOs₁₅Po₁₄TiU)Md₆(Bi₂BkPaPtSi₂)
100%
platform.defender
e008e80616533b9e83bc57a8c5f3232592d55d7fc84c3cadf69edafc771129a7
O(As₂)H(Db)Md₂(Bi)
99%
Obfuscated PowerShell payload
2b07d9485d644e740ebcf55a5f2a9768b98cb97e3238977e16ed3c77a55ca2ba
K(Mc₂)O₁₀(Co₃Al₂Ca₄Er₄I₄CDy₃Eu₂P₂Xe)H₉(Cm₉Cr₃Db₈F₅Hf₂Mg₂Os₁₀Po₁₁U)MdTh₃
97%
Phantom Stealer ransomware with crypto theft
9eea466fca41e3b3c448f60c36c2fa435b1744fe9d0efa543a7fb1ba15c5f9d6
O₁₀(C₂Co₂Al₂Ca₄Er₂I₃AsDyEu₂Xe)H₉(Cm₇Cr₃Db₈F₉Hf₂Mg₂Os₈Po₉U)Md₃(Bi₂Pt)Th₂
100%
Phantom Stealer malware with ransomware capabilities
2995f8d205e7c47a66f109365a23b4f1b534cd8f5fa224b838287f25c22ca692
O₂(CPr)H₃(Cm₃DbPo₂)Th
100%
Reflective loader executes downloaded payload
573e68608bbbf05cd7364eb791141deb3daba35b3098d23a047ac66979c75be1
O₂(PPr)H₅(DbF₂MgOs₇Po₈)Md(Bi₂)
98%
PE self-copy with Run-key persistence
492a93539066bbb570ec921614b09f21c4a3c509c0d35fb0f501b3ed4d05b24a
O₁₁(C₃Co₃Er₄Al₃Ca₅I₃AsDy₃Eu₂PrXe)H₁₀(Cm₉Cr₅Db₁₀DsF₁₀Hf₂Mg₂Os₁₀Po₁₃U₂)Md₃(Bi)Th₂
100%
Phantom Stealer malware with ransomware capabilities
100%
Powershell script with obfuscated binary payload
f808b3e2570a2446b1483274e9aaf0d235580dbeacb2f129d5b52adc745a91a2
O₂(PPr)H₅(DbF₂MgOs₇Po₈)Md(Bi₂)
98%
PE self-copy, injection, persistence