How to remove KMSTools.exe

KMSTools.exe

The module KMSTools.exe has been detected as Ransom.Sabsik

KMSTools.exe
Remove KMSTools.exe

File Details

Product Name:

KMS Tools Portable x86
Company Name:

Ratiborus
MD5: f5a035bc4c0cd032020fe1d2268dd603
Size: 46 MB
First Published: 2024-09-04 23:01:38 (a year ago)
Latest Published: 2024-09-04 23:01:38 (a year ago)
Status: Ransom.Sabsik (on last analysis)
Analysis Date: 2024-09-04 23:01:38 (a year ago)

Common Places:

%sysdrive%\intel

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00013107

PE Sections:

Name Size of data MD5
.code 66048 bf84c8728dceff373485afa9fe18e2b4
.text 1093120 3a3ca8c26d8b6e6c873a9148cd83ce7e
.rdata 203776 5753fb9c9901df8d56bb189fe689adef
.gfids 512 9c306b3e75065207be966fd258926f11
.00cfg 512 0e4b547681b2130dc5faba974e7e63bd
.data 46901760 b9a1013367b888f63d77be6b85422eec
.rsrc 111104 7c98d75d4cce713de1fdcb927af1fb75

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSTools.exe
copyright for information about KMSTools.exe