How to remove KMSAuto.exe
- File Details
- Overview
- Analysis
KMSAuto.exe
The module KMSAuto.exe has been detected as Hack.KMS
File Details
Product Name: |
|
Company Name: |
|
MD5: |
e959abc96fb8c2a788b5b036ae517c5d |
Size: |
1 MB |
First Published: |
2017-06-15 19:07:03 (7 years ago) |
Latest Published: |
2020-11-11 21:46:06 (4 years ago) |
Status: |
Hack.KMS (on last analysis) |
|
Analysis Date: |
2020-11-11 21:46:06 (4 years ago) |
%commonappdata%\microsoft\windows defender\localcopy\{392eb7d5-4610-4570-8e8e-1e34000533d4}-а.7z\а |
%temp%\rar$exa0.952 |
%desktop%\а 8 |
%profile%\downloads |
%desktop% |
%windir% |
%sysdrive%\новый том\программы\установленные программы\а |
%sysdrive%\windows.old.000\users\нико\downloads |
%sysdrive%\instal\акв не удалять\а |
%profile%\yandexdisk\загрузки\111.zip |
Windows (Activ 8)KMSAuto_1.exe |
KMSAuto.exe |
Windows (Activ 8)KMSAuto_1 (1).exe |
|
68.1% |
|
|
12.8% |
|
|
10.6% |
|
|
4.3% |
|
|
2.1% |
|
|
2.1% |
|
Windows 8.1 |
42.6% |
|
Windows 7 |
36.2% |
|
Windows 10 |
14.9% |
|
Windows 8 |
6.4% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00001000 |
Name |
Size of data |
MD5 |
.code |
50176 |
b2c9c343523d140b0ea1e58c91a8c4b6 |
.text |
295424 |
30d99609424f9114f813a9cfe24fab46 |
.rdata |
35328 |
635764fc271e981b72dd76c45f9849b3 |
.data |
1472000 |
f0434fb3ee9202c011ed233b54098a34 |
.rsrc |
46080 |
38b710fed3a816a7a0b777d95b03c73c |