Files named HEU_KMS_Activator_v60.0.0.exe

124.72.180.227 · HEU_KMS_Activator_v60.0.0.exe

/soft/

China · Chinanet

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: da1ea01de467cc8841d8457df69286dd4a7fe7be
SHA256: 9ffc88d0299cd3e554c1433510fac788ba49e1d050e275c41cd6d6c6746ae5c6
application/octet-stream
4.29MB
2025-04-12 14:19:40 +0000 UTC
repository.renho.work · HEU_KMS_Activator_v60.0.0.exe

/software/win/os/HEU_KMS_Activator/

China · China Unicom Beijing Province Network

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: da1ea01de467cc8841d8457df69286dd4a7fe7be
SHA256: 9ffc88d0299cd3e554c1433510fac788ba49e1d050e275c41cd6d6c6746ae5c6
application/octet-stream
4.29MB
2025-03-23 15:27:55 +0000 UTC