How to remove AutoKMS.exe
- File Details
- Overview
- Analysis
AutoKMS.exe
The module AutoKMS.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| MD5: |
5f8661f8550d9c66073ef49c1bbbaf8b |
| Size: |
714 KB |
| First Published: |
2017-07-06 08:08:31 (7 years ago) |
| Latest Published: |
2020-12-20 03:19:26 (4 years ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2020-12-20 03:19:26 (4 years ago) |
| %windir%\autokms |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
|
31.0% |
|
|
12.9% |
|
|
9.4% |
|
|
9.4% |
|
|
7.0% |
|
|
4.1% |
|
|
4.1% |
|
|
3.5% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
| Windows 7 |
66.9% |
|
| Windows 10 |
32.0% |
|
| Windows XP |
1.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0005918e |
| MVID: |
fac35bd0-202b-4fa5-9ba1-6b7045bcfe75 |
| Typelib ID: |
58acc958-754c-480c-9c3b-77a6573ae75e |
| Name |
Size of data |
MD5 |
| .text |
356864 |
73ccf3e93da8e267a0fa0cda0c2afbf3 |
| .rsrc |
373760 |
aa8c837540c48ddb2e33d9f36b67b011 |
| .reloc |
512 |
7aca7e52d3d1176d29c8fca512a78299 |
