File search engine

220.94.145.60 · clfSchool.exe

/update/clf_cloud_school/

South Korea · Korea Telecom

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: a96a878d3514a40cb965d6e016d0f8a307cd3014
SHA256: 2b4aa68239d666c0b160ef7942a24b7d670a03396dfd170522c884aedb447a6f
application/x-msdownload
16.27MB
2025-05-21 04:50:24 +0000 UTC
64.186.254.8 · v2rayN-windows-64.zip

/

United States · DMIT Cloud Services

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: e0d672392d90d02e7719182fb802e504cc0dfbfc
SHA256: 43875e44e4a85a331f22d2d77f9ab490289d0ec1301ecd579789eb288cae4035
application/zip
67.16MB
2025-12-22 11:09:47 +0000 UTC
2.139.243.255 · AcTools.TextToSpeechService.exe

/INSTALADOR PLANTILLA/extension/internal/plugins/

Spain · Telefonica De Espana S.a.u.

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 3c97f8cf0f8e669db1dfeab3eadada74d37f985c
SHA256: 6b22c81b11b9324414c05a5c95ebbc0596bd9164e249300f06f5ac24721b6341
application/x-msdownload
247.47KB
2025-01-07 23:28:10 +0000 UTC
2.139.243.255 · AcTools.GamepadServer.exe

/INSTALADOR PLANTILLA/extension/internal/plugins/

Spain · Telefonica De Espana S.a.u.

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: def560e50f3c9849e58e5445e16b214b38cbec3d
SHA256: 304929b2e8b7c8eacb52a6e1053884fc35d555afedda17281ce90e4ca59f74b3
application/x-msdownload
80.50KB
2025-01-07 23:28:10 +0000 UTC
2.139.243.255 · Content Manager.exe

/INSTALADOR PLANTILLA/

Spain · Telefonica De Espana S.a.u.

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 1d0abc9cf6d54dfbdaf42cbbe0651ec2dc58e976
SHA256: 2b092b87faf396f7673aedf18c4a28bcc0e794f4b6ed9cc07058e904c29bc521
application/x-msdownload
10.92MB
2024-11-02 13:53:14 +0000 UTC
2.139.243.255 · CONTENIDO BASE9.zip

/

Spain · Telefonica De Espana S.a.u.

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

SHA1: cb63793e9a6992e6704193cf4cecc528790ba965
SHA256: 5c105586d1a24213b7c402d917aca5216a2d053a20d3dbaa6ae381cf819de55c
application/zip
970.64MB
2024-04-25 17:23:04 +0000 UTC
2.139.243.255 · CONTENIDO BASE8.zip

/

Spain · Telefonica De Espana S.a.u.

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

SHA1: fa090941366ff46a1752f76e9e4b57d43a920e49
SHA256: 9f7d3fd6974f8b315dbfe07fd697d7df7d23928386d6029c7256b5d552d66c2b
application/zip
970.61MB
2024-04-17 17:42:29 +0000 UTC
129.159.35.35 · v2rayN-windows-64.zip

/7.10.4/

United States · Oracle Corporation

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: f0944a4a3ad44a7e44d191c3f6f35fe578db7599
SHA256: 5fecf5d89544b2825cc6ffedb825d87a89efb2ac30001085b12aff92b4e59894
application/zip
61.59MB
2025-03-06 09:38:50 +0000 UTC
185.97.254.64 · OCCT_12.1.11.zip

/

Russia · ArtPlanet LLC

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

SHA1: b4e6c23a153f35e8f50e284690b7f441e1bd0239
SHA256: 3fe07871bd5c9feeaf22ba67b449f6c7e4438a4286c4d27ab8ae2f4825f8cfc4
application/zip
116.15MB
2026-03-31 05:27:23 +0000 UTC
103.197.206.212 · Shadowsocks-4.4.1.0.zip

/

Bangladesh · Cosmopolitan Communications Limited

Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 1aab2b5f41c1c90ba8024c5a8bb8f902e7600727
SHA256: 62b74a688d22bfdf20f673a351580029d7b9de67c6facc9a5613b22b3f798968
application/zip
4.22MB
2024-07-25 08:33:14 +0000 UTC