File search engine

5.224.222.195 · svchost.exe

/

Spain · Vodafone Spain

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
application/x-msdos-program
676.00KB
2025-03-11 09:25:10 +0000 UTC
node2.swift-byte.de · svchost.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/syswow64/

Germany · Hetzner Online GmbH

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: e181b814d21cea26a9c715df649fef247cd64b40
SHA256: e301d318f74f5cda375ba6d9923595a6737800b8465cda0ea7f99f957279d812
application/octet-stream
58.70KB
2025-11-03 20:34:16 +0000 UTC
node2.swift-byte.de · svchost.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/drive_c/windows/system32/

Germany · Hetzner Online GmbH

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b14eccbe6ec5b5126611ed4d95116c73b1f09129
SHA256: 4cfc99bbbe89cb5993f2148f3c8f33d4933f4203f5e979b82a3ad37ab86b1e4c
application/octet-stream
61.12KB
2025-11-03 20:34:16 +0000 UTC
node2.swift-byte.de · svchost.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/syswow64/

Germany · Hetzner Online GmbH

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: e181b814d21cea26a9c715df649fef247cd64b40
SHA256: e301d318f74f5cda375ba6d9923595a6737800b8465cda0ea7f99f957279d812
application/octet-stream
58.70KB
2025-11-03 20:34:16 +0000 UTC
node2.swift-byte.de · svchost.exe

/6625a0fd-b528-45de-b619-75b844ec72e3/Steam/steamapps/compatdata/2278520/pfx/dosdevices/c:/windows/system32/

Germany · Hetzner Online GmbH

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: b14eccbe6ec5b5126611ed4d95116c73b1f09129
SHA256: 4cfc99bbbe89cb5993f2148f3c8f33d4933f4203f5e979b82a3ad37ab86b1e4c
application/octet-stream
61.12KB
2025-11-03 20:34:16 +0000 UTC
dums.be · keylog.zip

/down/

France · OVH SAS

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 17b518914b072cb88332dc7488162b9791ac476f
SHA256: dff0aa6845d2edc1d3efe19950597f64a08f0f6aef708a6ce8b8ffeb0a02261f
application/zip
590.45KB
2019-10-17 06:16:07 +0000 UTC
dums.be · keylog.zip

/down/

France · OVH SAS

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 17b518914b072cb88332dc7488162b9791ac476f
SHA256: dff0aa6845d2edc1d3efe19950597f64a08f0f6aef708a6ce8b8ffeb0a02261f
application/zip
590.45KB
2019-10-17 06:16:07 +0000 UTC
www.dums.be · keylog.zip

/down/

France · OVH SAS

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 17b518914b072cb88332dc7488162b9791ac476f
SHA256: dff0aa6845d2edc1d3efe19950597f64a08f0f6aef708a6ce8b8ffeb0a02261f
application/zip
590.45KB
2019-10-17 06:16:07 +0000 UTC
www.dums.be · keylog.zip

/down/

France · OVH SAS

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 17b518914b072cb88332dc7488162b9791ac476f
SHA256: dff0aa6845d2edc1d3efe19950597f64a08f0f6aef708a6ce8b8ffeb0a02261f
application/zip
590.45KB
2019-10-17 06:16:07 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/PC Seed/RedDeadRedemption_Linux/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: f1f9bbfd10729a3cde2edcffad26c5e8146ac97d
SHA256: b776072cc3a32e95281b958d2f16d4a82eb0557b221659953b03596bf4fcdfc0
application/octet-stream
64.18KB
2025-10-28 15:42:53 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTAVC_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-10-28 17:26:41 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTASA_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-10-28 18:43:52 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/PC Seed/GTA_Trilogy_Definitive_Linux/GTA3_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-10-28 16:46:08 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/PC Seed/CrashBandicoot4_Linux/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: a89a428426ec7a443b363ca28a08a51f5340778a
SHA256: c01ea5d204a1ac01f2b97cff6b1478ac23665c0062dc72efc0bc68acec41971a
application/octet-stream
52.65KB
2025-10-28 16:48:55 +0000 UTC
188.84.239.125 · svchost.exe

/

Spain · Vodafone Spain

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
application/x-msdos-program
676.00KB
2025-03-11 09:24:46 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/GTA_Trilogy_Definitive_Linux/GTAVC_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-05-24 22:37:33 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/GTA_Trilogy_Definitive_Linux/GTASA_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-05-25 00:45:49 +0000 UTC
dwkk44oow8sws8c4w0ksk0gc.rx2.nodes.gkloud.eu · svchost.exe

/GTA_Trilogy_Definitive_Linux/GTA3_DE/wine/lib/wine/x86_64-windows/

France · Scaleway S.a.s.

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: bc3aaa68c51639c162ea649a4d4cbac26b5be4fb
SHA256: 3ae441425fbbff5803a8b27c156a4647a49a8254d7f984d10fe56b27ff9aa4fd
application/octet-stream
64.18KB
2025-05-24 21:41:46 +0000 UTC
2.155.153.73 · svchost.exe

/

Spain · Vodafone Spain

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
application/x-msdos-program
676.00KB
2025-03-11 09:24:46 +0000 UTC
77.231.83.40 · svchost.exe

/

Spain · Vodafone Spain

Yara svchost_ANOMALY From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 1c291b618891f88888f9d5102ec8d663e4c40fcf
SHA256: 17dc80f435cb87e6f7a1d24cf1633e30e80a5e0507dd72943fa0a3a610d7fd2b
application/x-msdos-program
676.00KB
2025-03-11 09:24:46 +0000 UTC