File search engine

www.ds.thqnordic.com · Setup.exe

/spaceforce/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 51cfb03d0023158de4b2504e4ff3aca5f6e58c59
SHA256: 1e9d769b633ec643f5bec5c3f567730896e7c475bb34aca6039fda06197a85f6
application/octet-stream
808.50MB
2018-08-11 04:49:51 +0000 UTC
download.quicondominio.it · SetupQuiCondominioCloud.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 5aff67fa2f85a55ed4be969f36d2e0258955c0b8
SHA256: 05b1038acf66a225aaa8a72d584e3735b15a8986a557f00422ef3d3c376d26f7
application/x-msdos-program
64.05MB
2025-05-14 16:11:29 +0000 UTC
download.quicondominio.it · SetupQuiCondominio.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 943cea18df17e4243431ad69360b015605f438d7
SHA256: 20636e8d2867347dcf727f2a8d073b8b3e736e63f978b328754514d090bc8117
application/x-msdos-program
64.04MB
2025-03-11 10:55:38 +0000 UTC
download.quicondominio.it · SetupQuiCondominioCloud.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 5aff67fa2f85a55ed4be969f36d2e0258955c0b8
SHA256: 05b1038acf66a225aaa8a72d584e3735b15a8986a557f00422ef3d3c376d26f7
application/x-msdos-program
64.05MB
2025-05-14 16:11:29 +0000 UTC
download.quicondominio.it · SetupQuiCondominio.exe

/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 943cea18df17e4243431ad69360b015605f438d7
SHA256: 20636e8d2867347dcf727f2a8d073b8b3e736e63f978b328754514d090bc8117
application/x-msdos-program
64.04MB
2025-03-11 10:55:38 +0000 UTC
download.quicondominio.it · SetupQLauncher_1_0_9_7.exe

/Q-Launcher/Old/

Germany · Hetzner Online GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: b671ba246dc4ec4a63e42662039f73382a8e3c4d
SHA256: a03a83212289d88d8d53d1f1c3f316aa99f318d55d0b4322a02553b1547ac434
application/x-msdos-program
42.04MB
2025-02-06 10:46:43 +0000 UTC
ftp.shtrih-m.ru · TCPtoCOM.exe

/a.chernyaev/Утилиты/TCPtoCOM/

Russia · JSC Avantel

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 5e5e8b7453760445a80179b418e59508e9b15752
SHA256: 76ac072751903b330f79d1b21f8999a36618e1a29420906ec0d5f331b5aac3e2
application/octet-stream
24.75MB
2025-07-25 11:00:05 +0000 UTC
osni.in · NewActive.exe

/

Brazil · G6 Internet

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 35b7cf02001365714a75861809ba59c462e253d8
SHA256: d2c3e10aaca5234fb3feecc01e5637170f1b60f02dc676fe5ea7c54f1b97b7ad
application/x-msdos-program
4.83MB
2024-06-20 13:20:40 +0000 UTC
repo.vnci.io · ClassicShellSetup_4_3_0.exe

/windows/classic_shell/

France · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: a6b06d07fe3b1a7204b1b62c67fbf3c602385364
SHA256: 4ee910b283871ab31ef03eeb15d9557e89b55eda8f0580340b4dd2fc90305ac8
application/octet-stream
6.89MB
2017-04-20 15:30:30 +0000 UTC
repo.vnci.io · ClassicShellSetup_4_3_0.exe

/windows/classic_shell/

France · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: a6b06d07fe3b1a7204b1b62c67fbf3c602385364
SHA256: 4ee910b283871ab31ef03eeb15d9557e89b55eda8f0580340b4dd2fc90305ac8
application/octet-stream
6.89MB
2017-04-20 15:30:30 +0000 UTC
wrappers.vogonsdrivers.com · bosloader-1.0.zip

/files/DirectX/Hookers/bosloader/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: df76817e81ec7975004b678ddf923f8609da7f28
SHA256: 268574c26c78ce7bfda6f393009343500a3b51d730da3afa0da949ec921b6ea0
application/zip
89.60KB
2025-04-02 07:05:04 +0000 UTC
wrappers.vogonsdrivers.com · bosloader-1.0.zip

/files/DirectX/Hookers/bosloader/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: df76817e81ec7975004b678ddf923f8609da7f28
SHA256: 268574c26c78ce7bfda6f393009343500a3b51d730da3afa0da949ec921b6ea0
application/zip
89.60KB
2025-04-02 07:05:04 +0000 UTC
download.funmax.pk · SublimeText4.Build4142_x64.zip

/data/Software/

Pakistan · Fariya Networks Pvt. Ltd.

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: c40c4a8b7c24a35c7f31964b78380535752fa80f
SHA256: 74828445588f1976ab1d5e046b64685b712677005789db419784623867e0b2e9
application/zip
23.82MB
2026-04-13 22:44:00 +0000 UTC
wrappers.vogonsdrivers.com · d3dwindower-english.zip

/files/DirectX/Hookers/D3DWindower/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: e315f4046d81f58f1306eff1b6511425169dcd5a
SHA256: fabd732eeab16491c65db716118d2fb0c7cf2ed27f45aa4a6163444fce285ecf
application/zip
700.54KB
2025-04-02 07:04:07 +0000 UTC
wrappers.vogonsdrivers.com · D3DWindower-original.zip

/files/DirectX/Hookers/D3DWindower/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 56d7c4835a215d27aa0dad15ca49e0dfc0f081bb
SHA256: d94fd8b4690775bd5213b1276ed8a02553db38ba302ace3e76bae662454da324
application/zip
716.44KB
2025-04-02 07:04:07 +0000 UTC
wrappers.vogonsdrivers.com · d3dwindower-english.zip

/files/DirectX/Hookers/D3DWindower/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: e315f4046d81f58f1306eff1b6511425169dcd5a
SHA256: fabd732eeab16491c65db716118d2fb0c7cf2ed27f45aa4a6163444fce285ecf
application/zip
700.54KB
2025-04-02 07:04:07 +0000 UTC
wrappers.vogonsdrivers.com · D3DWindower-original.zip

/files/DirectX/Hookers/D3DWindower/

Australia · OVH SAS

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 56d7c4835a215d27aa0dad15ca49e0dfc0f081bb
SHA256: d94fd8b4690775bd5213b1276ed8a02553db38ba302ace3e76bae662454da324
application/zip
716.44KB
2025-04-02 07:04:07 +0000 UTC
download.funmax.pk · Stardock.Windowblinds.10.5.zip

/data/Software/

Pakistan · Fariya Networks Pvt. Ltd.

Yara SUSP_Imphash_Mar23_2 From Florian Roth by Arnim Rupp (https://github.com/ruppde)

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: fe7cd1d937a4f1a31a9b9a92aa58ddc5de35638f
SHA256: a96022044efc41797342a23ffd7ed2333d69c29fd8fe0d3e7f7d56beeb28be11
application/zip
53.74MB
2026-04-13 22:43:54 +0000 UTC
hgd.bigbox.at · Adobe Photoshop CS5 Portable Deutsch.zip

/

Germany · dogado GmbH

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

SHA1: 60a39deba9af61c95995f8dc3f6628923f1bbebc
SHA256: 1851a18a9eeeab57710a2bd7b6d954c683fe76fe3ad6dd7ab8288a15583e3adf
application/zip
111.63MB
2020-12-01 08:43:38 +0000 UTC
apimeet.eleget.net · imb123.zip

/

United States · DigitalOcean, LLC

Yara SUSP_XORed_MSDOS_Stub_Message From Florian Roth by Florian Roth

Download archived sample
The password is "infected"

SHA1: 64d4f3d0bfc0a292e12df2dcac48eddd6b176448
SHA256: 9e56f93632d13691230d06b8b0c697ec7f87d5c8b33bd6950563984853bc202a
application/zip
2.11MB
2021-02-11 22:27:47 +0000 UTC