How to remove KMSpico_SoftGozar.com.exe
- File Details
- Overview
- Analysis
KMSpico_SoftGozar.com.exe
The module KMSpico_SoftGozar.com.exe has been detected as Crack.AutoKMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
7226fbb17bd94a36f784be6a9c2688d3 |
| Size: |
3 MB |
| First Published: |
2017-05-27 06:05:52 (7 years ago) |
| Latest Published: |
2024-06-13 23:01:20 (8 months ago) |
| Status: |
Crack.AutoKMS (on last analysis) |
|
| Analysis Date: |
2024-06-13 23:01:20 (8 months ago) |
Overview
| Signed By: |
@ByELDI |
| Status: |
Invalid (digital signature could be stolen or file could be patched) |
| %profile%\downloads\kmspico v10.1.8.2 |
| %profile%\downloads\kmspico 10.1.8.2 + portable (activa office y windows)actualizado [mg]\p55kksifjf22\nueva carpeta\nueva carpeta\kmspico install |
| %profile%\downloads\kmspico 10.1.8.2 final + portable (office and windows 10 activator) [techtools.net]\kmspico.10.1.8.2 final [techtools.net]\kmspico.10.1.8.2\kmspico install |
| %mydoc%\kmspico 10.1.8.2 final + portable\kmspico install |
| %desktop%\solo programmi\microsoft.office.2016.32bit.rtm.v16.0.6868.2062.ita-ind\attivatori\kmspico v10.1.8.2 |
| %profile%\downloads\ativador windows 10\kmspico install |
| %desktop%\marcelo\ativador windows 10\kmspico install |
| %desktop%\chiave usb\microsoft office 2016 rtm v16.0.6868.2067 64 bit\microsoft office 2016 rtm v16.0.6868.2067 64 bit\attivatori\kmspico v10.1.8.2 |
| %sysdrive%\$recycle.bin\s-1-5-21-4240277036-140170404-1481622640-1001\$rbf35v6\attivatori\kmspico v10.1.8.2 |
| %profile%\downloads\kmspico 10.1.8.2 final + portable (office and windows 10 activator) [techtools.net]\kmspico.10.1.8.2\kmspico install |
| KMSpico_setup.exe |
| KMSpico_SoftGozar.com.exe |
| win10.exe |
| 145744 (2017_01_04 18_17_48 UTC).exe |
| kmspico_setup.exe |
| $RQ5G1XA.exe |
|
22.6% |
|
|
12.6% |
|
|
7.2% |
|
|
5.0% |
|
|
4.4% |
|
|
4.4% |
|
|
4.1% |
|
|
3.1% |
|
|
2.8% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.6% |
|
|
1.6% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
1.3% |
|
|
0.9% |
|
|
0.9% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
| Windows 10 |
71.1% |
|
| Windows 7 |
22.8% |
|
| Windows 8.1 |
5.5% |
|
| Windows 8 |
0.6% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0000a5f8 |
| Name |
Size of data |
MD5 |
| CODE |
40448 |
c3bd95c4b1a8e5199981e0d9b45fd18c |
| DATA |
1024 |
1ee71d84f1c77af85f1f5c278f880572 |
| BSS |
0 |
00000000000000000000000000000000 |
| .idata |
2560 |
bb5485bf968b970e5ea81292af2acdba |
| .tls |
0 |
00000000000000000000000000000000 |
| .rdata |
512 |
9ba824905bf9c7922b6fc87a38b74366 |
| .reloc |
0 |
00000000000000000000000000000000 |
| .rsrc |
23552 |
dacc847e7ab073ebf84d685b13329215 |
