How to remove KMSAUTO.EXE
- File Details
- Overview
- Analysis
KMSAUTO.EXE
The module KMSAUTO.EXE has been detected as Hack.KMS
File Details
| MD5: |
534c63016c4f0f59b81bc8397264e325 |
| Size: |
6 MB |
| First Published: |
2017-05-28 22:05:43 (7 years ago) |
| Latest Published: |
2023-07-03 23:03:25 (a year ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2023-07-03 23:03:25 (a year ago) |
Overview
| Signed By: |
WZT |
| Status: |
Valid |
| %desktop%\kmsauto lite portable 1.2.6 |
| %sysdrive%\windows |
| %sysdrive%\activators\kmsautolite |
| %profile%\downloads\shareit\mi-4c\my document\kmsauto lite portable v1.2.6 |
| %desktop%\kmsauto lite portable v1.2.6 |
| %profile%\downloads\programs\kmsauto lite portable v1.2.6 |
| %programfiles%\panda security\panda security protection\потерянныеинайденные |
| %profile%\downloads\kmsauto lite portable v1.2.6\kmsauto lite portable v1.2.6 |
| %temp%\temp1_kmsauto lite portable v1.2.6.zip\kmsauto lite portable v1.2.6 |
| %profile%\downloads\4-actoffice2016\4-actoffice2016 |
| KMSAuto.exe |
| KMSAUTO.EXE |
| KMSAuto.exe.quarantined |
| kmsauto.exe |
| KMSAuto (2).exe |
|
48.9% |
|
|
24.5% |
|
|
3.1% |
|
|
2.5% |
|
|
2.5% |
|
|
2.2% |
|
|
1.6% |
|
|
1.6% |
|
|
1.6% |
|
|
1.0% |
|
|
0.8% |
|
|
0.8% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
| Windows 10 |
74.7% |
|
| Windows 7 |
19.7% |
|
| Windows 8.1 |
2.8% |
|
| Windows Server 2012 R2 |
2.0% |
|
| Windows XP |
0.4% |
|
| Windows Server 2012 |
0.2% |
|
| Windows Server 2008 R2 |
0.2% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001000 |
| Name |
Size of data |
MD5 |
| .code |
112128 |
c4f468a5285ec5b5f2ad4a69bd3a7d7b |
| .text |
360448 |
b90ecc537a0254e1cdf3c3c3ba9f9526 |
| .rdata |
37888 |
e6187ad982d9d7967a02a7f08bebbfe5 |
| .data |
6249472 |
4f9994ceadd1e9bf5ebbbc7cce18d02a |
| .rsrc |
45568 |
ad645dbbd356906ea5fefccecdf25240 |
