File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • hp1d.com.br · klaus.lnk

    /tmp/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1d14ab08445ae1dc6e1d81cf2dbbd605ab3255a4
    SHA256: 904f23c0c46e948fa53279d9eb4a8c555ffacc6040780d9d35a31d2cd98780df
    2.57KB
    2025-12-10 20:12:36 +0000 UTC

  • hp1d.com.br · klaus.lnk

    /tmp/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1d14ab08445ae1dc6e1d81cf2dbbd605ab3255a4
    SHA256: 904f23c0c46e948fa53279d9eb4a8c555ffacc6040780d9d35a31d2cd98780df
    2.57KB
    2025-12-10 20:12:36 +0000 UTC

  • hp1d.com.br · klaus.lnk

    /

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1d14ab08445ae1dc6e1d81cf2dbbd605ab3255a4
    SHA256: 904f23c0c46e948fa53279d9eb4a8c555ffacc6040780d9d35a31d2cd98780df
    2.57KB
    2025-12-10 18:46:27 +0000 UTC

  • hp1d.com.br · klaus.lnk

    /

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1d14ab08445ae1dc6e1d81cf2dbbd605ab3255a4
    SHA256: 904f23c0c46e948fa53279d9eb4a8c555ffacc6040780d9d35a31d2cd98780df
    2.57KB
    2025-12-10 18:46:27 +0000 UTC

  • mitrael.eu · L2_RadarMap_Classic.utx.zip

    /updaterfileszip/updaterfiles/Textures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 6de692f3be1622904f38aa9da94628f0fb368c3d
    SHA256: 34d51de9b6fab2f2a4e3a6b5571ee9347e6f1685de962ca3c033739f943d7de5
    application/zip
    24.57MB
    2025-05-09 20:34:36 +0000 UTC

  • mitrael.eu · L2_RadarMap.utx.zip

    /updaterfileszip/updaterfiles/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: c3edc90a5abc22544eacd698b4ab8a7700143e1f
    SHA256: a8b57cb07a9e2dbe178788f57bda05ccb809464a798bcee61808e176ce077e34
    application/zip
    21.71MB
    2025-05-09 20:20:32 +0000 UTC

  • mitrael.eu · L2_RadarMap_Classic.utx.zip

    /updaterfileszip/updaterfiles/Textures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 6de692f3be1622904f38aa9da94628f0fb368c3d
    SHA256: 34d51de9b6fab2f2a4e3a6b5571ee9347e6f1685de962ca3c033739f943d7de5
    application/zip
    24.57MB
    2025-05-09 20:34:36 +0000 UTC

  • mitrael.eu · L2_RadarMap.utx.zip

    /updaterfileszip/updaterfiles/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: c3edc90a5abc22544eacd698b4ab8a7700143e1f
    SHA256: a8b57cb07a9e2dbe178788f57bda05ccb809464a798bcee61808e176ce077e34
    application/zip
    21.71MB
    2025-05-09 20:20:32 +0000 UTC

  • mitrael.eu · SkillSound4.uax.zip

    /updaterfileszip/updaterfiles/Sounds/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 0d449c84d2c2ae0e0fef3a85acef1873292fa071
    SHA256: 21a67704709305650415f6f84a3bc4f49cac92af9965a55be649f07db61e4e60
    application/zip
    15.36MB
    2025-05-09 19:45:29 +0000 UTC

  • mitrael.eu · MonSound6.uax.zip

    /updaterfileszip/updaterfiles/Sounds/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 69f52b8791641b3ed3a1c2df437c094375589713
    SHA256: c9c6669c6c2abf7655c65996b6acc1f544e1427cd90c8b402040bb4450a757e7
    application/zip
    37.10MB
    2025-05-09 19:42:16 +0000 UTC

  • mitrael.eu · iPerfectFIX.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 98e0117b2ada4d2467b9bd8a618d0495a0a9b47a
    SHA256: 9a21329f0ca821f88b6c3cdb7a0cf38a346fb0f455d0e7fb6bb815ab013bc031
    application/zip
    17.53KB
    2025-09-17 09:06:40 +0000 UTC

  • mitrael.eu · des_1kb.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: dbad54d05065162ea16fc5acd86cd720ecb54c23
    SHA256: d3be321c4328a5d8411273038aa332c4e4f05850b936c31c5dc48d42cf52163e
    application/zip
    5.52KB
    2025-09-17 09:05:02 +0000 UTC

  • mitrael.eu · L2PrivatBlue_NevesOma.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 578dadd2ebfc66073ec4c299dd236280c4046ef1
    SHA256: 8fef7add28c2f41c3594ce833b198d6ce6004e9ead49343721af6504dcc46002
    application/zip
    1.32MB
    2025-09-17 09:07:32 +0000 UTC

  • mitrael.eu · iPerfectFIX.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 98e0117b2ada4d2467b9bd8a618d0495a0a9b47a
    SHA256: 9a21329f0ca821f88b6c3cdb7a0cf38a346fb0f455d0e7fb6bb815ab013bc031
    application/zip
    17.53KB
    2025-09-17 09:06:40 +0000 UTC

  • mitrael.eu · des_1kb.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: dbad54d05065162ea16fc5acd86cd720ecb54c23
    SHA256: d3be321c4328a5d8411273038aa332c4e4f05850b936c31c5dc48d42cf52163e
    application/zip
    5.52KB
    2025-09-17 09:05:02 +0000 UTC

  • mitrael.eu · L2PrivatBlue_NevesOma.utx.zip

    /updaterfilesWOS/updaterfiles/systextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 578dadd2ebfc66073ec4c299dd236280c4046ef1
    SHA256: 8fef7add28c2f41c3594ce833b198d6ce6004e9ead49343721af6504dcc46002
    application/zip
    1.32MB
    2025-09-17 09:07:32 +0000 UTC

  • pop.upd.l2legend.ru · OrionPvP_ORD_MNano.utx.zip

    /L2Lupdate/input/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 8cb95fefe132a4493ac74a964d1a8d91165323e6
    SHA256: 94e49492dda1cd0a91c75e107b9fc515da3a2a150df37b6207336fc517343dd7
    application/zip
    1.87MB
    2024-02-22 11:48:44 +0000 UTC

  • pop.upd.l2legend.ru · Asgaard_Weapons.utx.zip

    /L2Lupdate/input/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 0e7fdacd5ad5d710fc7d8f378ecf0a8c1fc7eb39
    SHA256: 32dddb17a7990ba24b518cb04c99e631368ca377179e101a8c1e5c830538c054
    application/zip
    3.16MB
    2024-02-22 11:00:51 +0000 UTC

  • pop.upd.l2legend.ru · Asgaard_FMagic.utx.zip

    /L2Lupdate/input/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 136a39e3393d32f756c631a5fb6c1270cc58d568
    SHA256: c78f419f71ef18282d796a5b759797a0f9112b8663980d64ed1520bc49af71f0
    application/zip
    761.40KB
    2024-02-22 11:00:39 +0000 UTC

  • upd.l2legend.ru · OrionPvP_ORD_MNano.utx.zip

    /L2Lupdate/input/SysTextures/

    ·

    Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 8cb95fefe132a4493ac74a964d1a8d91165323e6
    SHA256: 94e49492dda1cd0a91c75e107b9fc515da3a2a150df37b6207336fc517343dd7
    application/zip
    1.87MB
    2024-02-22 11:48:44 +0000 UTC