URLhaus Database

You are currently viewing the URLhaus database entry for http://3.zhzy999.net/images/n.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	191095
URL:	http://3.zhzy999.net/images/n.exe
URL Status:	Online (spreading malware for 7 years, 5 months, 4 days, 6 hours, 34 minutes)
Host:	3.zhzy999.net
Date added:	2019-05-06 04:27:06 UTC
Threat:	Malware download
URLhaus blocklist:	Blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2026-08-31 02:30:23 UTC to abuse-reports{at}cloudzy[dot]com)
Tags:	exe

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2026-08-31	n.exe	exe	73475a4bda17b83de8cd6d13c6bf812bdb7930dfd6bffbb96701ab7eca5ee83f	n/a
2020-04-02	n/a	exe	92bd9732f75f5039992d37f9f72008ad260e4d0dc6cc31e422ccffca3a50ea0f	61.11%
2020-03-29	n/a	exe	84e917ee7c99d8d511237b523456769124ce402d4b539f4f03b397ffd844bcaf	n/a
2020-03-12	n/a	exe	a115a21ac2ec4da060777c6ac92968c237d76c7dcb2b6fe10ee9a61fa3b597b7	80.82%
2020-02-02	n/a	exe	54f7690820302c4ed95b0c16d49a3135bc1ca32db6e8bf60943b218bbc744e0a	n/a
2019-10-07	n/a	exe	4ca5db8c401f152b4f80c4b0245edfb8256c6c8216f132aae17fdbcf1552b813	n/a
2019-10-04	n/a	exe	9a946132203c1da1b379c4e04b9f9414d02a869e93dfa271224ed2731239d308	30.00%
2019-05-06	n/a	exe	51b3d6b1add70e3b14c8ea224dd804467523a4fe2360021576f559761331a084	73.24%