fd82570ab9005bb8112794a80707da320118e73d6b686df67ca40b0acd082af4

Analysis

max time kernel
93s
max time network
159s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
28-12-2024 21:55

Target

KMS Tools Lite Portable/KMS Tools Portable.chm
Size

645KB
MD5

16498d20922a580ad81241d9cf7dcdf0
SHA1

dc05b5089e993e85ee8e10b174a15f6bb03e2532
SHA256

7fbcbf065ce1626694df8c443c377d0478cf32601fe74b0fd742fbcfb4f94a3f
SHA512

5696b2c214311bc1e6f77ff77109d85fd15dbaf04b0ebbca67bcfb3fd054f85ee7c4dfde489dd2ae87a311f39a2fc14d9849ccaf4caeea7c03d88de5973594fa
SSDEEP

12288:05sHaRh+WTUuOGNfLecMT1oDe68MCUPAQiAnmApgxGhh/meSiPAF7:05rtTUgtLmordPACnmggonRYt

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1924	hh.exe
1924	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\KMS Tools Lite Portable\KMS Tools Portable.chm"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1924