File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 5a8d17e3c9dc52f44297a7db77f086dfea48f736
    SHA256: 45fbeaaf8f9a6751d8e9a818f7c50faef5908434ee377a3aaa5b6dd9cddfb57b
    application/x-msdownload
    16.64MB
    2025-08-06 12:08:38 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_test/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 5a8d17e3c9dc52f44297a7db77f086dfea48f736
    SHA256: 45fbeaaf8f9a6751d8e9a818f7c50faef5908434ee377a3aaa5b6dd9cddfb57b
    application/x-msdownload
    16.64MB
    2025-08-06 12:08:38 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/clf_cloud_school/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: a96a878d3514a40cb965d6e016d0f8a307cd3014
    SHA256: 2b4aa68239d666c0b160ef7942a24b7d670a03396dfd170522c884aedb447a6f
    application/x-msdownload
    16.27MB
    2025-05-21 04:50:24 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 8eea471c10bfa1d446e7b4da558230c208493d9b
    SHA256: ac566cbbd82b39c72d40a370d60679e45d536644c5c9fd282f3e28ca795ccfbc
    application/x-msdownload
    16.27MB
    2025-05-26 04:20:52 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_test/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 8eea471c10bfa1d446e7b4da558230c208493d9b
    SHA256: ac566cbbd82b39c72d40a370d60679e45d536644c5c9fd282f3e28ca795ccfbc
    application/x-msdownload
    16.27MB
    2025-05-26 04:20:52 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/clf_cloud_school/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: a96a878d3514a40cb965d6e016d0f8a307cd3014
    SHA256: 2b4aa68239d666c0b160ef7942a24b7d670a03396dfd170522c884aedb447a6f
    application/x-msdownload
    16.27MB
    2025-05-21 04:50:24 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Piranha Systems

    SHA1: d4427ad00ebea6f31963fa943a9239d18fc0d1b7
    SHA256: 6d7cb7790c63c10304e573b07487fffaf9ff2e89075fe293b634b41d6e1468b2
    application/x-msdownload
    3.85MB
    2024-07-04 01:52:17 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/cloudschool_v1/Navigator/충청북도 교육청/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: f35917d75cee8db59bee7a5dee57d206f9000a39
    SHA256: 713bb6601dc8be22083c4181a12eb3887c4994ff77a91542acff0dc1ec11d2a9
    application/x-msdownload
    4.85MB
    2024-10-23 15:23:39 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/cloudschool_v1/Navigator/인천광역시 교육청/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: f35917d75cee8db59bee7a5dee57d206f9000a39
    SHA256: 713bb6601dc8be22083c4181a12eb3887c4994ff77a91542acff0dc1ec11d2a9
    application/x-msdownload
    4.85MB
    2024-10-25 07:10:28 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/cloudschool_v1/Navigator/경기도 교육청/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: f35917d75cee8db59bee7a5dee57d206f9000a39
    SHA256: 713bb6601dc8be22083c4181a12eb3887c4994ff77a91542acff0dc1ec11d2a9
    application/x-msdownload
    4.85MB
    2024-10-25 07:10:28 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/cloudschool_test/

    South Korea · Piranha Systems

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 7c97229c21eb78a3d178e51086a10e3b533be374
    SHA256: a84829379f67ec46e087c80331faa4ef27d3a6e543a88a70145ef1a32fbf96be
    application/x-msdownload
    4.86MB
    2024-10-28 11:57:45 +0000 UTC

  • 14.206.17.130 · clfSchool.exe

    /update/clf_cloud_school/

    South Korea · Piranha Systems

    SHA1: c2a8549f5c374951df7c314fda7dd74a118e951d
    SHA256: cd79460150c99ffe38491da4323b120b6facf3d384b1c7d8edaffec8bc83a92c
    application/x-msdownload
    3.27MB
    2023-07-26 11:21:41 +0000 UTC