File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • 5.224.222.195 · svchost.exe

    /

    Spain · Vodafone Spain

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
    SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
    application/x-msdos-program
    676.00KB
    2025-03-11 09:25:10 +0000 UTC

  • node2.swift-byte.de · svchost.exe

    /6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/syswow64/

    Germany · Hetzner Online GmbH

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e181b814d21cea26a9c715df649fef247cd64b40
    SHA256: e301d318f74f5cda375ba6d9923595a6737800b8465cda0ea7f99f957279d812
    application/octet-stream
    58.70KB
    2025-11-03 20:34:16 +0000 UTC

  • node2.swift-byte.de · svchost.exe

    /6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/system32/

    Germany · Hetzner Online GmbH

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: b14eccbe6ec5b5126611ed4d95116c73b1f09129
    SHA256: 4cfc99bbbe89cb5993f2148f3c8f33d4933f4203f5e979b82a3ad37ab86b1e4c
    application/octet-stream
    61.12KB
    2025-11-03 20:34:16 +0000 UTC

  • node2.swift-byte.de · svchost.exe

    /6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/syswow64/

    Germany · Hetzner Online GmbH

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e181b814d21cea26a9c715df649fef247cd64b40
    SHA256: e301d318f74f5cda375ba6d9923595a6737800b8465cda0ea7f99f957279d812
    application/octet-stream
    58.70KB
    2025-11-03 20:34:16 +0000 UTC

  • node2.swift-byte.de · svchost.exe

    /6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/system32/

    Germany · Hetzner Online GmbH

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: b14eccbe6ec5b5126611ed4d95116c73b1f09129
    SHA256: 4cfc99bbbe89cb5993f2148f3c8f33d4933f4203f5e979b82a3ad37ab86b1e4c
    application/octet-stream
    61.12KB
    2025-11-03 20:34:16 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /PC Seed/RedDeadRedemption_Linux/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: f1f9bbfd10729a3cde2edcffad26c5e8146ac97d
    SHA256: b776072cc3a32e95281b958d2f16d4a82eb0557b221659953b03596bf4fcdfc0
    application/octet-stream
    64.18KB
    2025-10-28 15:42:53 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /PC Seed/GTA_Trilogy_Definitive_Linux/GTAVC_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-10-28 17:26:41 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /PC Seed/GTA_Trilogy_Definitive_Linux/GTASA_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-10-28 18:43:52 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /PC Seed/GTA_Trilogy_Definitive_Linux/GTA3_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-10-28 16:46:08 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /PC Seed/CrashBandicoot4_Linux/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: a89a428426ec7a443b363ca28a08a51f5340778a
    SHA256: c01ea5d204a1ac01f2b97cff6b1478ac23665c0062dc72efc0bc68acec41971a
    application/octet-stream
    52.65KB
    2025-10-28 16:48:55 +0000 UTC

  • mmmma.nz.waw.pl · svchost.exe

    /c/$Root/WINDOWS/system32/dllcache/

    Poland · Play

    SHA1: 49083ae3725a0488e0a8fbbe1335c745f70c4667
    SHA256: 2910ebc692d833d949bfd56059e8106d324a276d5f165f874f3fb1b6c613cdd5
    application/x-msdos-program
    14.00KB
    2013-08-21 18:12:14 +0000 UTC

  • 188.84.239.125 · svchost.exe

    /

    Spain · Vodafone Spain

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
    SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
    application/x-msdos-program
    676.00KB
    2025-03-11 09:24:46 +0000 UTC

  • 185.115.97.158 · svchost.exe

    /boot/iso/flash/minint/system32/

    Russia · Federal State Unitary Enterprise of the Order of the Red Banner of Labour Russian Broad-cast

    SHA1: a8c7dbd6a7ffb7d48654602c8b6434859a77307d
    SHA256: b36b1eb27ef04fcfb00fe7ffc8a565b77495df029f04c12aad098bcb276de9da
    application/octet-stream
    14.00KB
    2004-08-18 09:00:00 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /GTA_Trilogy_Definitive_Linux/GTAVC_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-05-24 22:37:33 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /GTA_Trilogy_Definitive_Linux/GTASA_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-05-25 00:45:49 +0000 UTC

  • dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

    /GTA_Trilogy_Definitive_Linux/GTA3_DE/wine/lib/wine/x86_64-windows/

    France · Scaleway S.a.s.

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
    SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
    application/octet-stream
    64.18KB
    2025-05-24 21:41:46 +0000 UTC

  • 2.155.153.73 · svchost.exe

    /

    Spain · Vodafone Spain

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
    SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
    application/x-msdos-program
    676.00KB
    2025-03-11 09:24:46 +0000 UTC

  • 121.18.80.70 · svchost.exe

    /

    China · CHINA UNICOM China169 Backbone

    SHA1: a2d14508b3edddf86d0d6672ee8f785d3cefd51b
    SHA256: 710134ffaf3a08d1b217da2f90afd85ae2e0d20f5d8968901b5943b26aa2f44b
    application/octet-stream
    37.88KB
    1970-01-01 00:00:00 +0000 UTC

  • 77.231.83.40 · svchost.exe

    /

    Spain · Vodafone Spain

    Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
    SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
    application/x-msdos-program
    676.00KB
    2025-03-11 09:24:46 +0000 UTC

  • thotleaders.org · svchost.exe

    /juicero/juicero/Windows/SysWOW64/

    · CLOUDFLARENET

    SHA1: 4af001b3c3816b860660cf2de2c0fd3c1dfb4878
    SHA256: 121118a0f5e0e8c933efd28c9901e54e42792619a8a3a6d11e1f0025a7324bc2
    application/x-msdos-program
    20.50KB
    2022-02-20 01:39:02 +0000 UTC