File search engine

updater.l2satory.com · L2_RadarMap.utx.zip

Russia · Uniontel Ltd

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: c4ada5e16a849ea52d7df4476a3e6400f48b2260
SHA256: 75e4da9674686ed127a4e5c1192bdd388b9ef1568bc9b8d4728b22f83f9258b1
application/zip
24.19MB
2024-11-30 20:56:27 +0000 UTC

updater.l2satory.com · SkillSound4.uax.zip

/Classic/client/Sounds/

Russia · Uniontel Ltd

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 42f53cd5603bc3bf8d74534dd51ecb2683b35bb7
SHA256: da07e380af2b7c9d6b68dcfb33cb8908fe09f0e2a41be3a043e209ddf9954555
application/zip
15.36MB
2024-11-30 20:55:19 +0000 UTC

updater.l2satory.com · MonSound6.uax.zip

/Classic/client/Sounds/

Russia · Uniontel Ltd

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 894ea287e24cbfffa59a89dddc9261e8ca041ee2
SHA256: 0e11741be0389c94aba47c65f2ac76a627b0ad51ba9c7b7be34310a4ce72d8f3
application/zip
37.10MB
2024-11-30 20:55:24 +0000 UTC

europvp-files.com · LineageNPCs_EuroPvP03.u.zip

/updater/client/Euro-PvP_Client_ru_en/system/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 525364686f48ba5810cc0822b6c48939f19a8a86
SHA256: e53d23ccfb1339d21d5b0426458f184a5f24202a7e6fb71256e1c980c6a1cac1
application/zip
16.10MB
2025-06-10 06:38:27 +0000 UTC

europvp-files.com · MonSound6.uax.zip

/updater/client/Euro-PvP_Client_ru_en/sounds/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: b399e4adf63bf0fd2b5b45b54109566993dee0c3
SHA256: 49662c08e5ecee028c4d1319bbcaff826992d390acc52011a00b5c7b9f6fa73f
application/zip
16.79MB
2025-06-10 06:37:48 +0000 UTC

europvp-files.com · LineageNPCs_EuroPvP03.u.zip

/updater/classicmod/EuroPvP_Patch_Classic_v1_mod/system_ru/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: a7e2a92bacca98dfeccfb8ddc024bd9fbd902503
SHA256: a84c284ee83cead629fb91fef34a8287a588690b0e43437b8527d57ca2463fb8
application/zip
15.97MB
2026-10-29 23:49:32 +0000 UTC

europvp-files.com · LineageNPCs_EuroPvP03.u.zip

/updater/classicmod/EuroPvP_Patch_Classic_v1_mod/system_en/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 14f8d077ccdfbfc8d5f64fabef1a895f0eae37e6
SHA256: 54358ef6fa89b214a50c64ccc9480938ce40404ba36deffe0da332fa6f643d3d
application/zip
15.97MB
2026-10-29 23:49:02 +0000 UTC

europvp-files.com · LineageNPCs_EuroPvP03.u.zip

/updater/classic/EuroPvP_Patch_Classic_v1/system_ru/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 503a8408299e726d4935dcc6191050d63348fee4
SHA256: 877a235ab8bc8607fdc9209d221c3f4114d9237a1d225ee9ee759f18819cf90a
application/zip
15.97MB
2026-10-29 23:44:08 +0000 UTC

europvp-files.com · LineageNPCs_EuroPvP03.u.zip

/updater/classic/EuroPvP_Patch_Classic_v1/system_en/

Moldova · Ava Host Srl

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: d9a0814d6ee431f250cabea0408d7c041f7d4a60
SHA256: af2969dfdb8e17b7528d80c7451bece3b71c3667a57b9245ad246ff1cbddeb5e
application/zip
15.97MB
2026-10-29 23:43:39 +0000 UTC

files.cdnessence.net · L2_RadarMap.utx.zip

/essenceClient/essenceClient/SysTextures/

Russia · NetCrafters OU

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 036e472f536583bfc1894348ffb027f0db2edd11
SHA256: 2e5ff35274bb567b8e3f9423e1d04bc656748b611d0ad77475fa631d9e20b090
application/zip
25.95MB
2026-10-23 12:51:25 +0000 UTC

files.cdnessence.net · SkillSound4.uax.zip

/essenceClient/essenceClient/Sounds/

Russia · NetCrafters OU

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: cccd1d0abb396d99eeb731bfb05ca272d67fe393
SHA256: 565b0fb7c0074ac95b9187a819986526cec8ba51a28cb6acc10c5fd8c41c7118
application/zip
56.95MB
2025-12-10 23:01:40 +0000 UTC

files.cdnessence.net · MonSound6.uax.zip

/essenceClient/essenceClient/Sounds/

Russia · NetCrafters OU

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 6311aec2a8d0bf2b117cd2f00106e30038c5d56a
SHA256: eb768af14d5f36d3a1e9c2ae35e6c7fdb92123c6aa7a5e6d1ac30ab8eb8c9b7e
application/zip
41.91MB
2025-12-10 23:01:04 +0000 UTC

updasfjnsjkafas.viranium.com · L2_RadarMap.utx.zip

/upd/client/SysTextures/

Seychelles · Alsycon B.V.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: f38819414cc0f11b7cb91f72b653f9a0c81f2022
SHA256: 3511e34d0ad099791cc2aa01bbe4fb3a7a1e01e9cb0fe0fb3a08847f85e7e772
application/zip
41.50MB
2026-10-21 13:39:58 +0000 UTC

updasfjnsjkafas.viranium.com · SkillSound4.uax.zip

/upd/client/Sounds/

Seychelles · Alsycon B.V.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 404b12826c0a133bdee867b4f6cf3f0e133b7d08
SHA256: 064710fb60ba02502a560302305c82ba24bfc28dd45c1f9f6c3d50fd46d1bdb1
application/zip
16.53MB
2026-10-21 13:39:51 +0000 UTC

updasfjnsjkafas.viranium.com · MonSound6.uax.zip

/upd/client/Sounds/

Seychelles · Alsycon B.V.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: c98878148399e7e3e14860b704686f525c679193
SHA256: 593426b3db10a31f620aefdb0fb9325058e515506926d51a3a380a50f75479e6
application/zip
40.78MB
2026-10-21 13:39:51 +0000 UTC

207.180.227.62 · Suporte.lnk

/

France · Contabo GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: a5fb67b72cb943c5a59797ebedb7fdc902b4ea31
SHA256: 8a267c904260e194cf78e425e85965a5c2ee1819b9bcfe81957f6d0fae496718
application/x-ms-shortcut
3.09KB
2026-09-03 22:02:53 +0000 UTC

207.180.227.62 · NFE's 2028.lnk

/

France · Contabo GmbH

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 2bd61fef06ede5f98340da3b9be3fdf1ffa1fb86
SHA256: c951b3ad8ae35ba23fad43052e2b46a0fd86abc99f64eaddaef5c80de61816c7
application/x-ms-shortcut
3.27KB
2026-08-07 02:50:20 +0000 UTC

try.l2ultra.net · iPerfectFIX.utx.bz2

//systextures/

· Cloudflare, Inc.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 273defce9435cd50c6411e155e8e6e5585452492
SHA256: 92a791f6da60f2765a9b2058379179ee56c8f26b354b8d1151a2dcb16c27b8f7
application/x-bzip
18.50KB
2026-09-16 16:24:38 +0000 UTC

docs.avito-tech.team · bah.zip

/client/

Russia · K2 Integration JSC

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: 87ae08b2b8c9ee2fc1d2df58871b010727639d46
SHA256: f17e84f8c7d81fa1c0341d657f52c43d5a4570d7dbfc29b1bc72d956fd50c348
application/zip
1.39MB
2026-10-15 12:42:11 +0000 UTC

sharinq-file.com · eblanoid.lnk

/

· Cloudflare, Inc.

Yara SUSP_LNK_SuspiciousCommands From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample

The password is "infected"

SHA1: d02c25bde2592b8497463f002ea01f3e5add1694
SHA256: 83c47771cdea1b4cfa8ebfd49684b08ae46e68101dea9c7e176f6bc906798454
application/octet-stream
3.55KB
2026-09-08 21:47:05 +0000 UTC