How to remove KMSAuto Net.exe

KMSAuto Net.exe

The module KMSAuto Net.exe has been detected as Possible Threat

KMSAuto Net.exe
Remove KMSAuto Net.exe

File Details

Product Name:

KMSAuto Net
Company Name:

MSFree Inc.
MD5: b9d0b1c63d81a546c6cf6fb800f881ab
Size: 8 MB
First Published: 2017-05-21 10:03:37 (7 years ago)
Latest Published: 2024-05-08 23:01:25 (8 months ago)
Status: Possible Threat (on last analysis)
Analysis Date: 2024-05-08 23:01:25 (8 months ago)

Overview

Signed By: Ratiborus MSFree Inc.
Status: Valid

Common Places:

%chromeprofile%\cache
%windir%\setup\scripts
%commonappdata%\kmsautos
%profile%\downloads\загрузки\загрузки\kmsauto-net-1.4.0
%profile%\downloads\kmsauto-net-1.4.0
%profile%\downloads\загрузки\kmsauto-net-1.4.0
%profile%\downloads\kmsauto net 2015 v1.4.0 portable
%temp%\nsjd3e8.tmp
%temp%\oftemp
%desktop%\office2016-32bit\kms\kmsauto net 2015 v1.4.0 portable

File Names:

f_000107
KMSAuto Net.exe
2.exe
kmsauto net.exe
KMSAuto.exe
TempKMSAuto_Net.exe
25711291-13F1-612C-1BEC-5113A51EA885_1d290461d6a0854

Geography:

27.5%
18.5%
15.5%
11.4%
2.7%
2.2%
1.6%
1.6%
1.1%
1.1%
1.1%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.8%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 52.3%
Windows 7 36.0%
Windows 8.1 9.8%
Windows 8 1.6%
Windows Embedded 8.1 0.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x008284fe

.NET Info:

MVID: 0c061b22-b435-459c-b01e-89760f3e7247
Typelib ID: fcaa9736-cfc3-43fa-33da-378396c3a336

PE Sections:

Name Size of data MD5
.text 8545792 70760c335ed10ecbae2c2e50b0ad7f29
.rsrc 48640 223a8a5d174008c19c94927626bb7ace
.reloc 512 09ed51275768c8e68164c1d7125b1378

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSAuto Net.exe
copyright for information about KMSAuto Net.exe