How to remove HEU_KMS.exe

HEU_KMS.exe

The module HEU_KMS.exe has been detected as Ransom.Wacatac

HEU_KMS.exe
Product Name:

HEU KMS Activator

Company Name:

知彼而知己

MD5: 46a752ebddbfb9178b336c4b968d8d23
Size: 4 MB
First Published: 2024-03-09 23:02:28 (a year ago)
Latest Published: 2025-01-07 23:07:10 (6 months ago)
Status: Ransom.Wacatac (on last analysis)
Analysis Date: 2025-01-07 23:07:10 (6 months ago)
%sysdrive%\全能pc端激活工具heukmsactivator v42.0.1
%sysdrive%\压缩软件\全能pc端激活工具heukmsactivator v42.0.1.7z
%profile%\downloads\morphs_installs_april_2024-teamos\morphs_installs_april_2024-teamos\installs
%desktop%\heu kms activator 42.0.1
50.0%
25.0%
25.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0051dd80

PE Sections:

Name Size of data MD5
UPX0 0 d41d8cd98f00b204e9800998ecf8427e
UPX1 381440 e88f78eb2b0c0d4ab8c3d24e74bc7981
.rsrc 4428288 6c6b1403d6effde292f1f47aa069ce46

More information:

Download GridinSoft Anti-Malware - Removal tool for HEU_KMS.exe