3611d70fd0636f5858bd4d436e75e4afc9fc8763a034254ad6d5033f4a64ef84

Analysis

max time kernel
1800s
max time network
1600s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
11/04/2023, 17:47

Target

KMS Tools Portable/data0.exe
Size

104.8MB
MD5

0a30f9cd71d28c72875a3915a22e1ee6
SHA1

4e7583b537f20d9f161763ee218d23b06ff4c025
SHA256

771ba033df3a2af55d26d355971e2cb22b4efd00ab805afe5388ecc8a0115981
SHA512

16d489d6656120830255a7281d8029aeab770a1f18c0e74cbaad07cbb9d79fbe22ed828026a1d35bb6d8a8629842fd5fca27313928141e71bed764e16665d1df
SSDEEP

1572864:RFcVlRJaNv5IUf88ubsMWKq1wDdQCUQteX+HTrYXT9mjVm3lWdkc2oDD9EZHCPaE:8JaNvqUpuQ2xiQto+3ySGMp2oNE1W7f

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1368	data0.exe

C:\Users\Admin\AppData\Local\Temp\KMS Tools Portable\data0.exe
"C:\Users\Admin\AppData\Local\Temp\KMS Tools Portable\data0.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1368