How to remove KMSClient.exe
- File Details
- Overview
- Analysis
KMSClient.exe
The module KMSClient.exe has been detected as Hack.AutoKMS
File Details
MD5: |
28e421a9e66adb373d655a1527ff803a |
Size: |
142 KB |
First Published: |
2017-05-21 03:02:01 (7 years ago) |
Latest Published: |
2020-08-10 22:04:37 (4 years ago) |
Status: |
Hack.AutoKMS (on last analysis) |
|
Analysis Date: |
2020-08-10 22:04:37 (4 years ago) |
%temp%\kmsnano |
%temp%\winrar1 |
%temp% |
%mydoc%\microsoft oficce 2013 (32bits)\activador\contenido |
%sysdrive%\기타 플램 - 164gb\(파워포인트 관련)\01. 오피스2013(xp에서는 설치 안됨)-win7,8에서만 설치됨\office 2013 통합버전 64비트 volume 한글판\오피스 2013 정품인증 방법\kms_k27 |
%sysdrive%\기타 플램 - 164gb\(파워포인트 관련)\01. 오피스2013(xp에서는 설치 안됨)-win7,8에서만 설치됨\office 2013 통합버전 32비트 volume 한글판\오피스 2013 정품인증 방법\kms_k27 |
%desktop%\microsoft oficce 2013 (32bits)\activador\contenido |
%sysdrive%\programas 15\office profesional plus 2013 by jd\activador office by jd |
%sysdrive%\docume~1\antoni~1.hel\config~1\temp |
%windir% |
KMS Client.exe |
KMSClient.exe |
KMScharger.exe |
|
13.0% |
|
|
10.4% |
|
|
7.8% |
|
|
7.8% |
|
|
6.5% |
|
|
5.2% |
|
|
5.2% |
|
|
5.2% |
|
|
5.2% |
|
|
3.9% |
|
|
3.9% |
|
|
3.9% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
Windows 7 |
57.1% |
|
Windows 10 |
31.2% |
|
Windows 8.1 |
5.2% |
|
Windows 8 |
5.2% |
|
Windows XP |
1.3% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00008621 |
Name |
Size of data |
MD5 |
.text |
84992 |
2d09ff72cec175eaa27f0944f535cd7e |
.rdata |
21504 |
3fcf5f6d742d22221c1757fcbb988720 |
.data |
29696 |
82c45639c5cdcb29cbfec4147ca647a2 |
.rsrc |
512 |
f6ab0bea429a6127369ecee73cd00d8c |
.reloc |
7680 |
c9dac35ee5a7f8b1261cc17a9f4e7481 |