How to remove HEU_KMS_Renewal.exe
- File Details
- Overview
- Analysis
HEU_KMS_Renewal.exe
The module HEU_KMS_Renewal.exe has been detected as General Threat
File Details
Company Name: |
|
MD5: |
3b81d654a4e88e71635dd0c3a92382d5 |
Size: |
1 MB |
First Published: |
2017-07-16 03:08:10 (6 years ago) |
Latest Published: |
2019-07-08 03:15:42 (4 years ago) |
Status: |
General Threat (on last analysis) |
|
Analysis Date: |
2019-07-08 03:15:42 (4 years ago) |
%windir%\kmsonboot |
%temp%\heu_kms_mini_786 |
%windir% |
%windir% |
%windir% |
Windows 7 |
53.8% |
|
Windows 10 |
23.1% |
|
Windows Server 2008 R2 |
7.7% |
|
Windows Server 2012 R2 |
7.7% |
|
Windows 8.1 |
7.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00017520 |
Name |
Size of data |
MD5 |
.text |
544768 |
724ec48c12da6bb4e41edee8787ecb92 |
.rdata |
105472 |
8fad974e6f4502d88cb7fc04ef60f9cb |
.data |
26624 |
9ae365febe633dd7b085f1477841566c |
.rsrc |
47616 |
a1e2c57ea13465713dc7c1be67b91f21 |