Files named PowerDataRecovery.exe

dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl5.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 40fbe2142011a43ba0e05f0b6c4beb96d55dcbe7
SHA256: d63a8e5fe0573a6074840ce01c61522050c88ea9aba65027f408a4e1af14e794
application/x-msdownload
61.83MB
2025-05-31 16:51:02 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
dl2.softjavid.ir · PowerDataRecovery.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 4aed49bb4bdf57334a20d3bbe23143b0c59bf1a8
SHA256: a68585b8d1161b0799007fdfd3428606b03054bd071ed959119ab948d8ba7ec0
application/x-msdownload
101.37MB
2023-12-15 03:10:00 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Personal/Ultimate/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 78f5b0354b910867d0cf2f3681a7d275e14caaaa
SHA256: 8479398300a4a61d938d5ffbfc4c1e2e80416a0bf2dc6c978fc0e8e4f3eaa91a
application/x-msdos-program
2.95MB
2023-02-14 10:47:25 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Personal/Standard/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: e8a65cb46e966ea2dd2aa23a9233cdd0afee6912
SHA256: bf4b339d4973522a3bb5ead93949517fb50bb6d671adf5bd307e8ef3918aa76f
application/x-msdos-program
2.95MB
2023-02-14 10:47:22 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Personal/Deluxe/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: b83cf90b2191d6f28fcc706445d4d4bbb7c941a7
SHA256: 5268f71128afef561b52c7fb3cab0492fe083a42b57b2cdca8afa25836dee925
application/x-msdos-program
2.95MB
2023-02-14 10:47:19 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Bussines/Technician/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6ce541ad7ed0c3d2c10a15899e94364fbd3ff01d
SHA256: b7cdb0a9b1211fbf28b08993d7a74fbf33001b01bafd77b4262005f2cf2879ab
application/x-msdos-program
2.95MB
2023-02-14 10:47:13 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Bussines/Standard/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: c8c12dd486fdffeec646de3ebf6be581930cb42b
SHA256: c6f17fdd96bc523ae6ac60a6eb2b742b88addf579bc625ccd24f69d592a33293
application/x-msdos-program
2.95MB
2023-02-14 10:47:07 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Bussines/Enterprise/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: b4adc71e18aad1c92b9cb8c88aacfe7e809776cd
SHA256: 5837acacf99d4dee14014e2f9e3d695b0888e1a0cc073669029450db09e91bce
application/x-msdos-program
2.95MB
2023-02-14 10:47:01 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x86/Bussines/Deluxe/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: be76de17bf2c88862f6b24386baa574357b6b2c8
SHA256: 164b187d7cbc3a842542541ca4e0867c8c8e0e1893771ca98174b12be6cc275f
application/x-msdos-program
2.95MB
2023-02-14 10:46:55 +0000 UTC
185.99.2.15 · PowerDataRecovery.exe

/FTP/MiniTool.PDR.BT.-RSLOAD.NET-/Crack UZ1/x64/Personal/Ultimate/

Bosnia and Herzegovina · Globalhost d.o.o.

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 4b86d3d9918d4c4f1163c1eb6c73f54510e4ec15
SHA256: 69937d0390e6cecd775282abc8e514bac0770fcab6c912db1c7501883f8bbfc0
application/x-msdos-program
3.08MB
2023-02-14 10:46:49 +0000 UTC