How to remove KMSClient.exe
- File Details
- Overview
- Analysis
KMSClient.exe
The module KMSClient.exe has been detected as Hack.AutoKMS
File Details
| MD5: |
28e421a9e66adb373d655a1527ff803a |
| Size: |
142 KB |
| First Published: |
2017-05-21 03:02:01 (7 years ago) |
| Latest Published: |
2020-08-10 22:04:37 (4 years ago) |
| Status: |
Hack.AutoKMS (on last analysis) |
|
| Analysis Date: |
2020-08-10 22:04:37 (4 years ago) |
| %temp%\kmsnano |
| %temp%\winrar1 |
| %temp% |
| %mydoc%\microsoft oficce 2013 (32bits)\activador\contenido |
| %sysdrive%\기타 플램 - 164gb\(파워포인트 관련)\01. 오피스2013(xp에서는 설치 안됨)-win7,8에서만 설치됨\office 2013 통합버전 64비트 volume 한글판\오피스 2013 정품인증 방법\kms_k27 |
| %sysdrive%\기타 플램 - 164gb\(파워포인트 관련)\01. 오피스2013(xp에서는 설치 안됨)-win7,8에서만 설치됨\office 2013 통합버전 32비트 volume 한글판\오피스 2013 정품인증 방법\kms_k27 |
| %desktop%\microsoft oficce 2013 (32bits)\activador\contenido |
| %sysdrive%\programas 15\office profesional plus 2013 by jd\activador office by jd |
| %sysdrive%\docume~1\antoni~1.hel\config~1\temp |
| %windir% |
| KMS Client.exe |
| KMSClient.exe |
| KMScharger.exe |
|
13.0% |
|
|
10.4% |
|
|
7.8% |
|
|
7.8% |
|
|
6.5% |
|
|
5.2% |
|
|
5.2% |
|
|
5.2% |
|
|
5.2% |
|
|
3.9% |
|
|
3.9% |
|
|
3.9% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
| Windows 7 |
57.1% |
|
| Windows 10 |
31.2% |
|
| Windows 8.1 |
5.2% |
|
| Windows 8 |
5.2% |
|
| Windows XP |
1.3% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00008621 |
| Name |
Size of data |
MD5 |
| .text |
84992 |
2d09ff72cec175eaa27f0944f535cd7e |
| .rdata |
21504 |
3fcf5f6d742d22221c1757fcbb988720 |
| .data |
29696 |
82c45639c5cdcb29cbfec4147ca647a2 |
| .rsrc |
512 |
f6ab0bea429a6127369ecee73cd00d8c |
| .reloc |
7680 |
c9dac35ee5a7f8b1261cc17a9f4e7481 |
