How to remove 105044842.exe

105044842.exe

The module 105044842.exe has been detected as Hack.KMS

105044842.exe
Remove 105044842.exe

File Details

Product Name:

KMS Server Emulator Service (XP)
Company Name:

MDL Forum, mod by Ratiborus
MD5: 22fc15f2c2e2a77bc5a1186e5f55d7d3
Size: 297 KB
First Published: 2017-05-21 06:07:21 (6 years ago)
Latest Published: 2024-04-21 23:02:17 (a day ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2024-04-21 23:02:17 (a day ago)

Overview

Signed By: WZT
Status: Valid

Common Places:

%commonappdata%\kmsautos\bin
%commonappdata%\kmsauto\bin
%appdata%\zhp\quarantine
%windir%\kmsautos\bin
%appdata%\zhp\quarantine\kmsautos\bin
%windir%\kms\bin
%sysdrive%\$recycle.bin\s-1-5-21-257334955-1849367147-1897638829-1000
%windir%\temp\kmsauto\bin
%appdata%\360safe\softmgr\unrulyicon
%sysdrive%\windows.old\programdata\kmsautos\bin

File Names:

KMSSS.exe
kmsss.exe
$RW1SPW8.exe
105044842.exe

Geography:

18.6%
15.7%
12.0%
3.7%
3.7%
3.3%
3.0%
2.8%
2.8%
2.6%
1.8%
1.6%
1.5%
1.5%
1.3%
1.3%
1.1%
1.0%
1.0%
1.0%
0.9%
0.7%
0.7%
0.7%
0.7%
0.6%
0.6%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 75.5%
Windows 7 16.2%
Windows 8.1 7.1%
Windows 8 0.8%
Windows Embedded 8.1 0.1%
Windows Server 2008 R2 0.1%
Windows Server 2012 0.1%
Windows Vista 0.1%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00019164

PE Sections:

Name Size of data MD5
.text 203264 84a6e810c4749f05e143fcc8c329cc58
.rdata 72704 8cbf870fa3734ec4d1cb3f7a2a1c51ef
.data 8192 2006135872ba9899fcb95d86165a4a4c
.rsrc 1536 7ef89e01596af42bac78bea6f205c471
.reloc 14336 5f95ac0361adf44781d483ab0b69e2e6

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for 105044842.exe
copyright for information about 105044842.exe