How to remove KMSAuto.exe
- File Details
- Overview
- Analysis
KMSAuto.exe
The module KMSAuto.exe has been detected as Hack.KMS
File Details
Product Name: |
|
Company Name: |
|
MD5: |
2beddf4ab46263b1d77a50f106361116 |
Size: |
5 MB |
First Published: |
2017-06-24 10:07:12 (7 years ago) |
Latest Published: |
2020-10-22 19:41:33 (4 years ago) |
Status: |
Hack.KMS (on last analysis) |
|
Analysis Date: |
2020-10-22 19:41:33 (4 years ago) |
%sysdrive%\activators\kmsauto lite 1.1.9 portable |
%profile%\activators\rsload.net.kmsauto.lite.portable.1.1.9.ru |
%mydoc%\kur\office 2010-craklar\tüm windows ve office.rar |
%desktop%\программы\активация\kmsauto lite 1.1.9 portable |
%profile%\activators |
%sysdrive%\activators |
%sysdrive%\сборники программ\сборник portable программ 01.07.2015 (x86 x64) rus\programs\bonus\kmsauto lite 1.1.9 portable.rar |
%sysdrive%\образы\windows 10\kmsauto lite portable v1.1.9.zip |
%windir% |
%sysdrive%\golchin narmafzar\karbordi |
|
45.5% |
|
|
27.3% |
|
|
6.8% |
|
|
4.5% |
|
|
4.5% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
|
2.3% |
|
Windows 7 |
72.7% |
|
Windows 10 |
15.9% |
|
Windows 8.1 |
11.4% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00001000 |
Name |
Size of data |
MD5 |
.code |
97792 |
e9fc33325b9151e2dde1cf3084f129cf |
.text |
307200 |
af59e255301633e792575b293c964164 |
.rdata |
35840 |
5b527ff002dc0f62f19951a1ddb2ff1e |
.data |
5059072 |
920eddf98897b3a1243aa349fe76ffed |
.rsrc |
45568 |
6cc7bd71db3ef44ef6bc0f576009b5b8 |