How to remove KMSAuto Net.exe
- File Details
- Overview
- Analysis
KMSAuto Net.exe
The module KMSAuto Net.exe has been detected as Hack.KMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
251315d31409559e539715a9a6e33c25 |
| Size: |
6 MB |
| First Published: |
2017-06-28 00:11:13 (6 years ago) |
| Latest Published: |
2018-11-17 10:00:41 (5 years ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2018-11-17 10:00:41 (5 years ago) |
Overview
| Signed By: |
Ratiborus MSFree Inc. |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %commonappdata%\kmsautos |
| %temp%\rarsfx0 |
| %commonappdata% |
| Windows 10 |
77.8% |
|
| Windows Server 2008 R2 |
16.7% |
|
| Windows 7 |
5.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0069ab1e |
| MVID: |
589b8274-0bc7-410b-a4f8-94f72ee2429b |
| Name |
Size of data |
MD5 |
| .text |
6917120 |
7cdb394bde0bccc4dc55d4ae62804793 |
| .rsrc |
48128 |
0681b470f0c980bce4cada57eb671232 |
| .reloc |
512 |
148f68408b1aa4d451bc7449c47c5cc5 |
