How to remove AutoKMS.exe
- File Details
- Overview
- Analysis
AutoKMS.exe
The module AutoKMS.exe has been detected as Virtool.Gendows
File Details
MD5: |
4e8c983215115036c46841ffb51562a1 |
Size: |
2 MB |
First Published: |
2017-05-22 07:06:29 (6 years ago) |
Latest Published: |
2022-03-29 23:13:11 (2 years ago) |
Status: |
Virtool.Gendows (on last analysis) |
|
Analysis Date: |
2022-03-29 23:13:11 (2 years ago) |
%windir%\autokms |
%windir% |
%windir% |
%windir% |
%windir% |
%windir% |
%windir% |
%windir% |
%windir% |
%windir% |
|
16.7% |
|
|
9.3% |
|
|
8.8% |
|
|
8.3% |
|
|
7.4% |
|
|
3.7% |
|
|
3.2% |
|
|
3.2% |
|
|
2.8% |
|
|
2.8% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
Windows 7 |
68.5% |
|
Windows 10 |
20.5% |
|
Windows 8.1 |
5.0% |
|
Windows 8 |
5.0% |
|
Windows XP |
0.5% |
|
Windows Server 2012 |
0.5% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00256fea |
MVID: |
45a4f044-d414-4a9c-b9ee-4b3e71e30eb0 |
Typelib ID: |
3e577747-1842-4364-af1e-ed2a30c03f61 |
Name |
Size of data |
MD5 |
.text |
2445312 |
394be75e9612a48f214c106972c5ea1b |
.rsrc |
374272 |
ccc4be6153a8ff121e4651b5a1b12c17 |
.reloc |
512 |
ebb9b381db5e14860097a7c4a189d53a |