How to remove HEU_KMS_Renewal.exe

HEU_KMS_Renewal.exe

The module HEU_KMS_Renewal.exe has been detected as General Threat

HEU_KMS_Renewal.exe
Remove HEU_KMS_Renewal.exe

File Details

Company Name:

HEU CNST
MD5: 9b268499b4decff80c56ef85ee9a120b
Size: 1 MB
First Published: 2017-05-24 15:08:28 (6 years ago)
Latest Published: 2020-05-27 17:41:05 (3 years ago)
Status: General Threat (on last analysis)
Analysis Date: 2020-05-27 17:41:05 (3 years ago)

Common Places:

%windir%\kmsonboot
%windir%
%temp%
%windir%
%windir%
%windir%

Geography:

44.4%
22.2%
22.2%
11.1%

OS Version:

Windows 7 44.4%
Windows 10 33.3%
Windows Server 2012 R2 11.1%
Windows 8.1 11.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00017520

PE Sections:

Name Size of data MD5
.text 544768 724ec48c12da6bb4e41edee8787ecb92
.rdata 105472 8fad974e6f4502d88cb7fc04ef60f9cb
.data 26624 9ae365febe633dd7b085f1477841566c
.rsrc 47616 fe9ffbdab4fb2a66c9dd462590c25b3a

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for HEU_KMS_Renewal.exe
copyright for information about HEU_KMS_Renewal.exe