How to remove KMS Server.exe
- File Details
- Overview
- Analysis
KMS Server.exe
The module KMS Server.exe has been detected as Virtool.AutoKMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
dea944b772306561745a2d94ccf703c0 |
| Size: |
231 KB |
| First Published: |
2020-01-21 00:50:18 (6 years ago) |
| Latest Published: |
2022-03-01 23:59:36 (4 years ago) |
| Status: |
Virtool.AutoKMS (on last analysis) |
|
| Analysis Date: |
2022-03-01 23:59:36 (4 years ago) |
| %sysdrive%\gerdootemp |
| %sysdrive%\tools_2020\microsoft office 2013 32bit\gerdoo |
| %sysdrive%\gerdootemp |
| %desktop%\microsoft office 2013 professional plus sp1\kms activator 6.1 |
| %windir%\temp |
| %desktop% |
| %windir%\temp |
| %windir%\temp |
| Windows 8.1 |
60.0% |
|
| Windows 7 |
30.0% |
|
| Windows 10 |
10.0% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000d43c |
| Name |
Size of data |
MD5 |
| .text |
150528 |
e6b348a7c1c8cda998558ff900acdff3 |
| .rdata |
68608 |
369672b6143388f1c50fded58e5d90c9 |
| .data |
6656 |
25a97b351f157b4fc068aa642106ac29 |
| .rsrc |
1536 |
229427cc70587ce62d3ea700807aa712 |
| .reloc |
8192 |
bffe12bac2991aa0aec5565e263d822c |
