How to remove $RR3H8QZ.exe

$RR3H8QZ.exe

The module $RR3H8QZ.exe has been detected as Crack.KMS

$RR3H8QZ.exe
MD5: 9e615fe7d4ad10d8be84491cabb29658
Size: 936 KB
First Published: 2017-06-06 15:10:35 (7 years ago)
Latest Published: 2021-01-05 00:07:31 (3 years ago)
Status: Crack.KMS (on last analysis)
Analysis Date: 2021-01-05 00:07:31 (3 years ago)
Signed By: WZTeam
Status: Valid
%sysdrive%\programdata
%desktop%\help\aact 3.2 dc 11.03.2017 portable
%sysdrive%\windows
%sysdrive%\$recycle.bin\s-1-5-21-3079547435-2452456064-1848147036-1001\$rxinokf.2017_portable_226305759-\aact_3.2_dc_11.03 (2).2017_portable\aact 3.2 dc 11.03.2017 portable
%sysdrive%\$recycle.bin\s-1-5-21-3079547435-2452456064-1848147036-1001\$rxinokf.2017_portable_226305759-\aact_3.2_dc_11.03.2017_portable\aact 3.2 dc 11.03.2017 portable
%programfiles%\aact
%profile%\downloads\jetdownloader\kms_tools_portable_13_07_2017.sanet.cd\kms tools portable\programs\aact v3.2 portable
%profile%\downloads\windows.10.ru-en.x86-x64.12in1+-office.2016.by.smokieblahblah.17.07.17\windows.10.ru-en.x86-x64.12in1+-office.2016.by.smokieblahblah.17.07.17\smbb\setup\$oem$_scripts_shared\activator\aact
%sysdrive%\kms\aact
%profile%\downloads\kms_tools_portable_13_07_2017\kms tools portable\programs\aact v3.2 portable
AAct.exe
$RR3H8QZ.exe
AAct_Portable_3.2.exe
AACT.EXE
A0004980.exe
aact.exe
Setup.exe
$R80OJCH.exe
A0020732.exe
$RH21VVW.exe
34.9%
28.5%
20.0%
1.5%
1.3%
0.9%
0.8%
0.8%
0.8%
0.8%
0.8%
0.7%
0.7%
0.6%
0.6%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
Windows 10 77.6%
Windows 7 17.7%
Windows 8.1 3.4%
Windows XP 0.5%
Windows Vista 0.4%
Windows Embedded 8.1 0.2%
Windows 8 0.2%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 71680 017f87f5c8746c288bbaf8eefa7815d1
.text 356352 96c4fd683cbb5abdbc015f172e4e6e16
.rdata 37376 699f65f6a8c4c5af6c42f4dfb330674a
.data 416768 1d846a42505456076d0e46e9d86791b2
.rsrc 69120 19981fbb374002befb01b1b4c5bfb3fa

More information:

Download GridinSoft Anti-Malware - Removal tool for $RR3H8QZ.exe