How to remove KMSAuto Net.exe
- File Details
- Overview
- Analysis
KMSAuto Net.exe
The module KMSAuto Net.exe has been detected as Trojan.Agent
File Details
Product Name: |
|
Company Name: |
|
MD5: |
b3975843d5e221e79aa5731b48dcb17b |
Size: |
5 MB |
First Published: |
2017-06-07 04:05:40 (7 years ago) |
Latest Published: |
2020-06-28 22:31:31 (4 years ago) |
Status: |
Trojan.Agent (on last analysis) |
|
Analysis Date: |
2020-06-28 22:31:31 (4 years ago) |
%appdata%\idm\kmsauto net - windows and office activator |
%profile%\downloads\programs\kmsauto net - windows and office activator |
%commonappdata%\kmsautos |
%appdata%\idm |
%profile%\downloads\programs |
%sysdrive%\softwar\windows activaitor |
%commonappdata% |
%sysdrive%\khu ung dung cho pc\kich net offline 2013 oke kmsauto net\kmsauto net 2014 v1.2.7 portable en.zip |
%sysdrive%\torrents\all activation 7\kmsauto net 2014 1.2.7 portable\kmsauto net 2014 1.2.7 portable |
%sysdrive%\torrents\all activation 7\kmsauto net 2014 1.2.7 portable.rar\kmsauto net 2014 1.2.7 portable |
|
66.1% |
|
|
12.5% |
|
|
7.1% |
|
|
3.6% |
|
|
3.6% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
|
1.8% |
|
Windows 7 |
35.6% |
|
Windows 8.1 |
32.2% |
|
Windows 10 |
30.5% |
|
Windows Server 2012 R2 |
1.7% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0055d2ae |
MVID: |
f5997cf2-0e1a-40a7-bebf-848ed1eae0bc |
Typelib ID: |
fcad9796-cfc1-41fa-93da-378996c2a356 |
Name |
Size of data |
MD5 |
.text |
5616640 |
0d2c685ef63b82de7452447dfcc583ee |
.rsrc |
48640 |
8b2b2da7cdc629a785d6bae90b3cfb87 |
.reloc |
512 |
373a9d68dc45d0966e616229d91b6be2 |