How to remove AutoKMS.exe
- File Details
- Overview
- Analysis
AutoKMS.exe
The module AutoKMS.exe has been detected as Trojan.Agent
File Details
| Product Name: |
|
| MD5: |
cca616647db9370c88998ae25da6997f |
| Size: |
712 KB |
| First Published: |
2017-05-24 14:03:03 (7 years ago) |
| Latest Published: |
2023-09-21 23:01:56 (a year ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2023-09-21 23:01:56 (a year ago) |
| %windir%\autokms |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
| %windir% |
|
21.3% |
|
|
10.3% |
|
|
9.7% |
|
|
6.6% |
|
|
5.8% |
|
|
5.2% |
|
|
3.9% |
|
|
3.9% |
|
|
3.2% |
|
|
2.6% |
|
|
2.4% |
|
|
2.1% |
|
|
1.5% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.0% |
|
|
0.8% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
| Windows 7 |
81.9% |
|
| Windows 10 |
14.7% |
|
| Windows 8.1 |
3.0% |
|
| Windows XP |
0.3% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0005872e |
| MVID: |
18c96e60-5a67-47f9-8907-5c0585f2d3a9 |
| Typelib ID: |
58acc958-754c-480c-9c3b-77a6573ae75e |
| Name |
Size of data |
MD5 |
| .text |
354304 |
51af201fb98ba2dbe2052537fff591a8 |
| .rsrc |
373760 |
e9c87b8d292b63f2e477ed3dcaf8cffb |
| .reloc |
512 |
a57314d62dd39bb116bd1a2af2e1b891 |
