File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • sayhellohi.duckdns.org · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 6b0792b1fc5ac529280b7dcb9a3d6ebd08683062
    SHA256: 00865111794a479656609adcdfe44fda0e97fa84d946cfbae8153d4d7dca7704
    application/x-msdownload
    14.61MB
    2025-12-10 04:03:25 +0000 UTC

  • sayhellohi.duckdns.org · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 6b0792b1fc5ac529280b7dcb9a3d6ebd08683062
    SHA256: 00865111794a479656609adcdfe44fda0e97fa84d946cfbae8153d4d7dca7704
    application/x-msdownload
    14.61MB
    2025-12-10 04:03:25 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 6b0792b1fc5ac529280b7dcb9a3d6ebd08683062
    SHA256: 00865111794a479656609adcdfe44fda0e97fa84d946cfbae8153d4d7dca7704
    application/x-msdownload
    14.61MB
    2025-12-10 04:03:25 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.exe

    /update/cloudschool_v1/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 6b0792b1fc5ac529280b7dcb9a3d6ebd08683062
    SHA256: 00865111794a479656609adcdfe44fda0e97fa84d946cfbae8153d4d7dca7704
    application/x-msdownload
    14.61MB
    2025-12-10 04:03:25 +0000 UTC