How to remove HEU_KMS_Service.exe
- File Details
- Overview
- Analysis
HEU_KMS_Service.exe
The module HEU_KMS_Service.exe has been detected as PUP.AutoKMS
File Details
Product Name: |
|
Company Name: |
|
MD5: |
45b9b807a7dbf1b186f2e148749ebbb9 |
Size: |
22 KB |
First Published: |
2017-05-27 17:10:45 (6 years ago) |
Latest Published: |
2020-12-15 06:01:03 (3 years ago) |
Status: |
PUP.AutoKMS (on last analysis) |
|
Analysis Date: |
2020-12-15 06:01:03 (3 years ago) |
%sysdrive%\windows |
%windir%\kmsonboot |
%windir%\temp |
%temp%\heu_kms_mini_783 |
%temp%\heu_kms_mini_100 |
%temp%\heu_kms_mini_112 |
%windir% |
%temp% |
%windir% |
%windir% |
|
45.0% |
|
|
28.8% |
|
|
6.3% |
|
|
4.5% |
|
|
3.6% |
|
|
2.7% |
|
|
1.8% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
Windows 10 |
45.9% |
|
Windows 7 |
32.4% |
|
Windows 8.1 |
9.9% |
|
Windows Server 2012 R2 |
4.5% |
|
Windows Server 2016 |
3.6% |
|
Windows Server 2008 R2 |
2.7% |
|
Windows 8 |
0.9% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000027a6 |
Name |
Size of data |
MD5 |
.text |
8192 |
433ec1b1afea3ee621266b119826976e |
.rdata |
6656 |
20b5b1e828f420de05e6a71020e34ca8 |
.data |
3072 |
78b28a6586b0e81d22e7cca6c776084e |
.rsrc |
3072 |
c89396e444c8ade7aeb7f037455d2fd4 |
.reloc |
1024 |
8ab6c71df75b9f8d0ba5a616332838b8 |