| 7b23fa9e7d37b063… | f3.ps1 | ps1 | SnappyClient | 2026-09-05 | 319,293 B |
| 50e475897327e6b9… | lytkc14.ps1 | ps1 | ACRStealer | 2026-09-05 | 1,694,200 B |
| 7141b54f72e809eb… | djhgjh75034.ps1 | ps1 | ACRStealer | 2026-09-05 | 1,603,289 B |
| 572fa3dd2128f376… | cakewallet_payload.vbs | vbs | - | 2026-09-05 | 13,564,633 B |
| c4972ee913fba0da… | PUQ-SW10-321313.js | js | AsyncRAT | 2026-09-05 | 814,742 B |
| 3119231f219b9384… | jquery-3.3.1-mp.js | js | - | 2026-09-05 | 88,503 B |
| c2cbfd7b1efe1e4b… | jquery-3.3.1-wp.js | js | - | 2026-09-05 | 87,501 B |
| 8f167ff22812d7df… | tld.min.desktop.js | js | - | 2026-09-05 | 141,653 B |
| e02855a0c4e27b79… | pe_worker.js | js | - | 2026-09-05 | 784,279 B |
| 5865cccca8ec217c… | 2026app_K1.xls | xls | - | 2026-09-04 | 3,595,776 B |
| 2072c29a227b8cd1… | Rasmlar5⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ | apk | - | 2026-09-04 | 5,357,500 B |
| 8bad0bba338929b0… | abonent.apk | apk | - | 2026-09-04 | 8,096,091 B |
| 92ad27531df11d88… | adb_setup_vn.bat | bat | ConnectWise | 2026-09-04 | 2,526 B |
| b26bf6ba1b6a75a2… | Journal_Daily_v3.3.ps1 | ps1 | CountLoader | 2026-09-04 | 235,519 B |
| 5f9c9dae7109000a… | tmp_105725_e0cc.ps1 | ps1 | - | 2026-09-04 | 3,939 B |
| 8b7c0db133126003… | tmp_16344_4acb.ps1 | ps1 | - | 2026-09-04 | 3,938 B |
| 93ad82dac79025bf… | ps_9EO6rbtDnhzz_1788491724115.ps1 | ps1 | AgentTesla | 2026-09-04 | 1,554,532 B |
| 26981dedd90f93b8… | Details and Specification for Bulk Order | vbs | RemcosRAT | 2026-09-04 | 88,030 B |
| 3fb74a2ca0526e34… | spsx.vbs | vbs | - | 2026-09-04 | 6,899 B |
| 03f470bf77190e63… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 34,150,366 B |
| 9514e1fd617f2190… | Pre-Alert_Documents_and_Debit_Note_预警文件及 | js | - | 2026-09-04 | 3,064,764 B |
| 48fbd29ed74798f1… | Scan2026-09-03_095840.pdf.js | js | - | 2026-09-04 | 387,905 B |
| fd54f9b3a36484f1… | PO489443.pdf.js | js | RemcosRAT | 2026-09-04 | 62,527,166 B |
| 2872d04fde75cf1e… | Orden compra7474683736373637863.js | js | AgentTesla | 2026-09-04 | 39,758,882 B |
| c6553a746f16365e… | PAGO FACT.js | js | - | 2026-09-04 | 816,035 B |
| becc8edb126822de… | Comprobante de pago BBVA.js | js | - | 2026-09-04 | 313,103 B |
| 840532ba6a0d3d02… | LPG-6152187 - RTA5.js | js | HypeAgent | 2026-09-04 | 641,557 B |
| 0b86cafcf0e1c94a… | orden de compra.js | js | - | 2026-09-04 | 291,907 B |
| 92560e59e41ce7d7… | Banco de Crédito del Perú_Copia de Pago. | js | RemcosRAT | 2026-09-04 | 3,107,168 B |
| 0c0376ca6dd09b76… | Detalle de los bienes solicitados__pdf.j | js | Formbook | 2026-09-04 | 569,239 B |
| e5754b0a31822971… | 4235739256-docs_offline_iframe_api_bin.j | js | - | 2026-09-04 | 326,005 B |
| c64eabac2b00bea3… | New RFQ SEPT. 04262601.pdf.js | js | Formbook | 2026-09-04 | 23,211 B |
| d34417fcbf330629… | FedEx_Shipment_Document.js | js | RemcosRAT | 2026-09-04 | 30,396,806 B |
| 312b7accf3c04a06… | Spare parts New order #000068.pdf.js | js | Formbook | 2026-09-04 | 3,059,585 B |
| 0d1689fe59e1382c… | PGH9TWq98765.js | js | PhantomStealer | 2026-09-04 | 4,605,729 B |
| 0b82b25ace53b6d4… | New PO-048166.js | js | - | 2026-09-04 | 3,397,937 B |
| f953cd680c9e20cd… | payment_reciept_statement_04_09_2026_000 | js | Formbook | 2026-09-04 | 5,421,357 B |
| 2f77fe7a4034d92b… | Proforma invoice.js | js | VIPKeylogger | 2026-09-04 | 1,408,383 B |
| 55e753769c333074… | PO_1175-2026.pdf.js | js | RemcosRAT | 2026-09-04 | 298,145 B |
| 51dbb63665de509b… | DCP.js | js | - | 2026-09-04 | 12,694 B |
| 2477ec272f268e39… | Doc001886_1308002341 Pdf.JS | js | Formbook | 2026-09-04 | 3,641,393 B |
| 11a7350f23f9e76b… | FAC-26A-635-6908.pdf.js | js | PhantomStealer | 2026-09-04 | 4,399,949 B |
| 312b4b61b5f5d65f… | PLAĆANJE_63467.js | js | Formbook | 2026-09-04 | 572,603 B |
| 36f7787c221587cd… | shipping Doc787863553553.js | js | PureLogsStealer | 2026-09-04 | 299,090 B |
| 0f07126e64d4a576… | 202606230029750.pdf.js | js | AsyncRAT | 2026-09-04 | 207,226 B |
| 3a219f14e2d3518f… | Aviso de remesa – Copia SWIFT___________ | js | Formbook | 2026-09-04 | 563,971 B |
| ed0eae35cd6a60ab… | Detalle del aviso de pago.js | js | AgentTesla | 2026-09-04 | 501,743 B |
| 4ffbc74cb1a6babb… | ekstre.pdf.js | js | DonutLoader | 2026-09-04 | 2,495,374 B |
| e562804877bcccba… | Comprobante de pago BBVA.js | js | AgentTesla | 2026-09-04 | 304,082 B |
| 47e01b539a2067ee… | LPBIR0013723.js | js | Formbook | 2026-09-04 | 572,490 B |