File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • sayhellohi.duckdns.org · clfSchool.zip

    /update/cloudschool_v2_test/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
    SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
    application/zip
    13.52MB
    2026-08-31 05:52:11 +0000 UTC

  • sayhellohi.duckdns.org · clfSchool.zip

    /update/cloudschool_v2_test/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
    SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
    application/zip
    13.52MB
    2026-08-31 05:52:11 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.zip

    /update/cloudschool_v2_test/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
    SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
    application/zip
    13.52MB
    2026-08-31 05:52:11 +0000 UTC

  • cloudinc.direct.quickconnect.to · clfSchool.zip

    /update/cloudschool_v2_test/

    South Korea · Korea Telecom

    Yara INDICATOR_EXE_Packed_Fody From AlienVault by ditekSHen
    Download archived sample
    The password is "infected"

    SHA1: 2f75a1632106cdd3d86bd06b9c542bc2ec8d739e
    SHA256: ebbaabc0f1e4dfeb32d5abda220be4632c90afc53f99f01e4c365471155e0a8b
    application/zip
    13.52MB
    2026-08-31 05:52:11 +0000 UTC