File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • download.52moyu.net · RelayKeyAssistant.exe

    /

    · Cloudflare, Inc.

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: b48a962b93c05b4ac2e0dbfeb4c4499fb2be3c02
    SHA256: a5d0defc2982664fc70dbf4cf9ee2f2b8aa801032d1d3797b59c223108050d04
    application/octet-stream
    154.19MB
    2026-06-15 07:04:30 +0000 UTC

  • 220.94.145.60 · Diskusage.exe

    /

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: fd423447ef3d66557ea9d8b205c863b96ce8c894
    SHA256: 8208531bde2da215939a12de67506179d7dda05e9423245431c4c1bbce5ad126
    application/x-msdownload
    142.00MB
    2025-03-25 09:18:00 +0000 UTC

  • 219.139.230.68 · 歌词下载ZonyLrcTools_win-x64_2026010879.zip

    /0-工具箱-装机必备/

    China · CHINATELECOM Hubei province Wuhan 5G network

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 4273ce1f7fe7e70d902de8929cfef44ca34fcad9
    SHA256: 026f8758826e6feeefba6d7b93568e625fe435bbbb733f3de50fde5f22aa4bd3
    application/zip
    32.51MB
    2026-07-12 14:09:39 +0000 UTC

  • 178.254.32.25 · Frija.exe

    /

    Germany · EVANZO e-commerce GmbH

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 7a88a6d56d8984d4d906ef181a6a915f25899531
    SHA256: 024a732748e0a130d1f1931a5994891e47ae90d526f9b2a325299eb401df6680
    application/x-msdos-program
    15.11MB
    2025-05-15 21:40:45 +0000 UTC

  • 66.97.39.160 · ExtraccionVueltos.zip

    /Alvear/ProblemaVueltos/

    Argentina · Dattatec.com

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 81dac35fec1e30705220de3d2a619f0e346d41a1
    SHA256: 8861682e07b1562e4747b1d2d38e7010fdef312232886aa58f7e0a92e57c7e19
    application/zip
    25.11MB
    2025-02-24 14:14:54 +0000 UTC

  • 66.97.39.160 · AjusteCtaCte.zip

    /Alvear/ProblemaVueltos/

    Argentina · Dattatec.com

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 7e94619715ab6cc72daf8d64d02576ca4a7492a0
    SHA256: 8513df9f60630a320b2619fbffab4b313cd5d6e7ca453eed0eda7dab2d49b671
    application/zip
    26.62MB
    2025-02-24 20:11:59 +0000 UTC

  • 129.159.35.35 · OPC.exe

    /OPC/DE_YOU/

    United States · Oracle Corporation

    Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

    SHA1: 498b33b07f14c22befdd2e61a2962f6908fef21d
    SHA256: 926ad3fa79293777fce4edc14d20260f81254bc33077136722931b1b3874c14c
    application/octet-stream
    122.48MB
    2026-01-04 12:32:52 +0000 UTC