How to remove KMSAuto Net.exe
- File Details
- Overview
- Analysis
KMSAuto Net.exe
The module KMSAuto Net.exe has been detected as Hack.KMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
954934268af782bbc1f1783d0b9b3057 |
| Size: |
4 MB |
| First Published: |
2017-07-12 06:06:23 (7 years ago) |
| Latest Published: |
2019-06-19 09:20:34 (5 years ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2019-06-19 09:20:34 (5 years ago) |
| %profile%\downloads\kmsauto net 2014 1.2.8 portable\kmsauto net 2014 v1.2.8 portable ua |
| %sysdrive%\резервные копии\ноутбук\downloads\kmsauto net 2014 1.2.8 portable.zip\kmsauto net 2014 1.2.8 portable |
| %sysdrive%\my soft\soft\win_all\8.1\!!!активаторы!!!\kmsauto net 2014 1.2.8 portable |
| %sysdrive%\microsoft toolkit collection pack august (2014) -\kmsanet.2014.v1.2.8.portable |
| %sysdrive%\windowns8 8.1 activater\mtcpaug2014.rar\mtcpaug2014.cheva.softarchive.net\kmsanet.2014.v1.2.8.portable |
| %desktop%\activator\kmsauto net 2014 1.2.8 portable\kmsauto net 2014 1.2.8 portable |
| %sysdrive%\installs\inst\ms\windows 8.1 enterprise original by d!akov (32bit+64bit) (2014) (multi)\kmsauto net 2014 1.2.8 portable |
| %sysdrive%\old pc\установки програмок\kmsauto net 2014 1.2.8 portable активатор windows |
| %sysdrive%\download\windows7\kmsauto net 2014 1.2.8 portable |
| %sysdrive%\$recycle.bin\s-1-5-21-109065329-2471704888-1540669871-1002\$rsaww81\kmsauto net 2014 1.2.8 portable |
|
34.8% |
|
|
30.4% |
|
|
8.7% |
|
|
8.7% |
|
|
4.3% |
|
|
4.3% |
|
|
4.3% |
|
|
4.3% |
|
| Windows 10 |
43.5% |
|
| Windows 8.1 |
26.1% |
|
| Windows 7 |
17.4% |
|
| Windows Server 2008 R2 |
13.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00486fae |
| MVID: |
a3f6ffc5-dfb4-485a-873d-75b98ca04ac7 |
| Typelib ID: |
fcad9796-cfc1-41fa-93da-378996c2a356 |
| Name |
Size of data |
MD5 |
| .text |
4739072 |
6157805e6fee8a4803b0c9ed6c1eb666 |
| .rsrc |
48640 |
e83da5e957b31b40c817bf4712dbe972 |
| .reloc |
512 |
dd0ec15acbb20265f3404ddc742f7128 |
