How to remove $RG0WDTK.exe
- File Details
- Overview
- Analysis
$RG0WDTK.exe
The module $RG0WDTK.exe has been detected as Hack.AutoKMS
File Details
| Product Name: |
|
| MD5: |
cf973e3cc9f47b5b2e3305f8b17071eb |
| Size: |
15 MB |
| First Published: |
2017-05-21 11:04:47 (8 years ago) |
| Latest Published: |
2024-10-08 23:01:50 (a year ago) |
| Status: |
Hack.AutoKMS (on last analysis) |
|
| Analysis Date: |
2024-10-08 23:01:50 (a year ago) |
| %profile%\downloads\compressed\chiase360.com_office 2010 toolkit v2.0\office 2010 toolkit v2.0 |
| %profile%\downloads\compressed\chiase360.com_of2010tk v2.0.rar\chiase360.com_office 2010 toolkit v2.0\office 2010 toolkit v2.0 |
| %profile%\downloads\chiase360.com_office 2010 toolkit v2.0\office 2010 toolkit v2.0 |
| %temp%\rar$exa0.707\chiase360.com_office 2010 toolkit v2.0\office 2010 toolkit v2.0 |
| %desktop%\microsoft office 2010 activator - any version [verifiedfiles] |
| %desktop%\usb\microsoft office 2010 activator - any version [verifiedfiles] |
| %sysdrive%\$recycle.bin\s-1-5-21-4123336653-2114462340-3433091104-1000 |
| %desktop%\chiase360.com_office 2010 toolkit v2.0\office 2010 toolkit v2.0 |
| %profile%\downloads\programas\office\office.rar\office-2010-toolkit\ativador |
| %desktop%\nuova cartella |
| Office 2010 Toolkit.exe |
| $RG0WDTK.exe |
| Office 2010 and 2013.exe |
| OTK2010.exe |
| Activador Office 2010.exe |
| 2010 Toolkit.exe |
| officeToolkit 2010 .exe |
| $RSMATDU.exe |
| Office 2010 Activador.exe |
| Office 2010 Toolkit 2.0 [Activator].exe |
| Activar Office 2010 Actualizado 14 JUNIO 2011.exe |
| office 2010 toolkit.exe |
| ActivadorOffice 2010 Toolkit.exe |
| activar2010.exe |
| $RX0BRS5.exe |
| $RIGSM8B.exe |
| activar2010 (2).exe |
| $R8C84HA.exe |
| $RKTWHMJ.exe |
| $R9GDG7D.exe |
| Office 2010 EZ Activator 2.0.exe |
| Office 2010 v.2 Toolkit.exe |
| tools.exe |
| Crack Office.exe |
| Office 2010 Toolkit 2.0 Final.exe |
| ATIVADOR.exe |
| Office 2010 Toolkit 2.0.exe |
| Toolkit.exe |
| O14TK.exe |
| vOffice 2010 Toolkit.exe |
| SETUP v.2.0.exe |
| Office 2010 Toolkit-Crack.exe |
| Toolkit Office 2010.exe |
| Ativador Office 2010.exe |
| A0048224.exe |
| Of 2010 Toolkit.exe |
| 1-Office 2010 Toolkit.exe |
| $RNRHY5C.exe |
| activar Office 2010.exe |
| activador_office.exe |
| Office 2010 Toolkit v2.0.exe |
| [www.kuyhaa-android19.com]Office 2010 Toolkit.exe |
| office 2010 toolkit (2).exe |
| Office 2010 Toolkit Activador 100%.exe |
| Activador 2.exe |
| Office 2010 Toolkitc.exe |
| Office 2010 Toolkitb.exe |
| Office_2010_Toolkit.exe |
| Activar Office 2010 By Jeanperuvian.exe |
| Office_2010_Toolkit_2.0.exe |
| Office 2010 Toolkit - generatore -stefano-.exe |
| Office 2010 Toolkit.exe.quarantined |
| Aktivator-Office-2010.exe |
|
39.3% |
|
|
22.3% |
|
|
4.3% |
|
|
3.2% |
|
|
2.8% |
|
|
2.7% |
|
|
2.5% |
|
|
2.1% |
|
|
2.0% |
|
|
1.9% |
|
|
1.0% |
|
|
1.0% |
|
|
0.9% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 7 |
56.2% |
|
| Windows 10 |
35.8% |
|
| Windows 8.1 |
4.8% |
|
| Windows XP |
1.3% |
|
| Windows 8 |
1.1% |
|
| Windows Server 2008 R2 |
0.4% |
|
| Windows Vista |
0.2% |
|
| Windows Server 2012 |
0.1% |
|
| Windows Embedded Standard |
0.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00ebdb7e |
| MVID: |
8ae918ad-fa83-44aa-9aa9-890a6ad7484c |
| Typelib ID: |
58acc958-754c-480c-9c3b-77a6573ae75e |
| Name |
Size of data |
MD5 |
| .text |
15449088 |
d0ad67b1623e07e5dc91392836473b51 |
| .rsrc |
373760 |
1e9c5a80fdf5bbf7631577980ace4b1b |
| .reloc |
512 |
634d39853b8608f287f621d538611d44 |
