How to remove KMSnano.exe
- File Details
- Overview
- Analysis
KMSnano.exe
The module KMSnano.exe has been detected as Hack.AutoKMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
c9035e94e561fb984768c51b0f27cf9d |
| Size: |
29 MB |
| First Published: |
2017-05-30 09:12:38 (6 years ago) |
| Latest Published: |
2023-06-05 23:24:53 (10 months ago) |
| Status: |
Hack.AutoKMS (on last analysis) |
|
| Analysis Date: |
2023-06-05 23:24:53 (10 months ago) |
| %profile%\downloads\compressed\69c916a5de67aebd68afbcc246f64af5\officeprofessionalplus_x86\kmsnano v19 automatic activator |
| %profile%\downloads\officeprofessionalplus_x86\kmsnano v19 automatic activator |
| %desktop%\nová složka\office-2013-aktivátor\aktivator - kmsnano v19 final |
| %temp%\rarsfx0 |
| %sysdrive%\$recycle.bin\s-1-5-21-2919223602-501224877-3065559222-1001\$rcse3p9.188\officeprofessionalplus_x64\kmsnano v19 automatic activator |
| %profile%\downloads\microsoft-office-professional-plus-2013-cz-en-64bit\microsoft office professional plus 2013 cz en 64bit\aktivator - kmsnano v19 final |
| %sysdrive%\program\visioprofessional_x64 |
| %desktop%\programs\yeni klasör (2)\offce13.pro.fulldosya.gen.tr\offce13.pro.fulldosya.gen.tr |
| %sysdrive%\data\other files\k_drive |
| %sysdrive%\programs\office 2013\office 2013 x32\officeprofessionalplus_x86 |
|
46.7% |
|
|
18.5% |
|
|
5.4% |
|
|
4.3% |
|
|
4.3% |
|
|
4.3% |
|
|
3.3% |
|
|
3.3% |
|
|
3.3% |
|
|
2.2% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
| Windows 10 |
48.4% |
|
| Windows 7 |
45.2% |
|
| Windows 8.1 |
5.4% |
|
| Windows XP |
1.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000168cf |
| Name |
Size of data |
MD5 |
| .text |
90624 |
4794b31aa8ab9b337e775f7340a2271d |
| .rdata |
14336 |
4db2dba763a9460e4543f48d7929b457 |
| .data |
2048 |
948353a21f43eb6ad7b646bc00bb4688 |
| .rsrc |
372224 |
96640076b64aa94fe35c30a0dd7032ec |
