How to remove KMSS.exe
KMSS.exe
The module KMSS.exe has been detected as Hack.KMS
File Details
| Product Name: | KMS emulator by Ratiborus |
| Company Name: | MSFree Inc. |
| MD5: | be3f826075408b5d6ae7b66a55b4a520 |
| Size: | 34 KB |
| First Published: | 2017-09-19 08:10:14 (6 years ago) |
| Latest Published: | 2020-06-15 16:20:00 (3 years ago) |
| Status: | Hack.KMS (on last analysis) | |
| Analysis Date: | 2020-06-15 16:20:00 (3 years ago) |
Overview
| Signed By: | WZT |
| Status: | Valid |
Common Places:
| %windir%\kmsautos\bin |
| %sysdrive%\$recycle.bin\s-1-5-21-3587992563-859264662-1537172197-1001\$rvdfzef\online\files\bin |
| %windir%\files |
| %windir%\kms |
| %windir%\kmsautos |
| %profile%\downloads\office kms activator 2017 ultimate\files |
| %profile%\downloads\.ptmp818463\office kms activator 2018 ultimate by graphic evolved\files |
| %temp%\rar$exa1696.14187\office kms activator 2017 ultimate\files |
| %desktop%\files |
| %desktop%\office kms activator 2017 ultimate\files |
File Names:
| KMSSS.exe |
| KMSS.exe |
| kmsss.exe |
| kmss.exe |
Geography:
| 23.1% | ||
| 15.4% | ||
| 13.5% | ||
| 7.7% | ||
| 3.8% | ||
| 3.8% | ||
| 3.8% | ||
| 3.8% | ||
| 3.8% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% | ||
| 1.9% |
OS Version:
| Windows 10 | 82.7% | |
| Windows 7 | 11.5% | |
| Windows XP | 3.8% | |
| Windows 8.1 | 1.9% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00002ad2 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 11264 | 55170fe85c9eb1ec69e1a69c3eb43dcf |
| .rdata | 10752 | f77c7b5de0563e72cabe4adbd515c584 |
| .data | 4608 | 5223865be9f92986b71bbe0fdd05f973 |
| .rsrc | 2048 | dd9d8e23d8fedb2966872e59366a9034 |
| .reloc | 2048 | 3729af294b6bba96a957f57a2aa6f51b |
More information:
Download GridinSoft
Anti-Malware - Removal tool for KMSS.exe
