FILE1 SOURCE
SHA256 c7e9332731b06644fc73e0046a2a89eaa59b09f54250e9bd622467187351711f
File hash published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordÆ / PUBLIC MALWARE INTELLIGENCE
Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
1 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
INDICATOR1 SOURCE
IP 26.1.1.2
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 20.15.5.3
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 126.51.108.152
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN stockmarketnews.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN styles.dat.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordFILE1 SOURCE
SHA256 2ab684d93c1553fad87041b4dea97188a97e78589deee2a7bacff905564f3a35
File hash published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN gr3.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 142.11.200.189
Indicator published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN stockmarketnet.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordFILE1 SOURCE
SHA256 f02a924c9ff92a8780ce812511341182c6b509d45bc59f3f7b522e37225d24fc
File hash published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN viewpdf.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN docs.zip
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN container.sender
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 23.169.65.49
Indicator published by the cited source.
First reported Jun 15, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN meshagent32-azure-ops.exe
Indicator published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordFILE1 SOURCE
SHA256 d83fdb9e53c5ff03c4cb0451ea1bebd79b53f29eadc1e2fa394c7af13a86ce2f
File hash published by the cited source.
First reported Jun 11, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 207.190.37.94
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 20.18.3.1
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN copia.msi
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN ms-api-win-render.dll
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordINDICATOR1 SOURCE
DOMAIN smnet.exe
Indicator published by the cited source.
First reported Jun 25, 2026 14:00 UTCOpen evidence recordREPORT1 SOURCE
Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager
Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan, Lukasz Lamparski Introduction In early 2026, Mandiant identified a threat actor targeting SD-WAN infrastructure at a service provider. After gaining initial access, the threat actor exploited a zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN to escalate privileges from a compromised administrative account to root-leve
First reported Jun 24, 2026 11:00 UTCOpen evidence recordINDICATOR1 SOURCE
IP 20.9.9.2
Indicator published by the cited source.
First reported Jun 24, 2026 11:00 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.