How to remove OInstall.exe
- File Details
- Overview
- Analysis
OInstall.exe
The module OInstall.exe has been detected as Hack.KMS
File Details
| Product Name: |
|
| MD5: |
af0ef2667eaa9d3b0e7c2f5ca5169448 |
| Size: |
11 MB |
| First Published: |
2017-10-07 20:07:48 (6 years ago) |
| Latest Published: |
2023-06-15 23:39:17 (10 months ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2023-06-15 23:39:17 (10 months ago) |
Overview
| Signed By: |
WZT |
| Status: |
Valid |
| %mydoc%\store\insta |
| %temp%\rar$exa0.321\microsoft office 2016 |
| %temp%\rar$exa0.636\microsoft office 2016 |
| %temp%\rar$exa0.302\microsoft office 2016 |
| %temp%\rar$exa0.654\microsoft office 2016 |
| %temp%\rar$exa0.154\microsoft office 2016 |
| %temp%\rar$exa0.319\microsoft office 2016 |
| %profile%\downloads\microsoft office 2016 - devo (1)\microsoft office 2016 |
| %sysdrive%\$recycle.bin\s-1-5-21-4246540608-865900945-522504025-1000\$rgwvsdo |
| %sysdrive%\$recycle.bin\s-1-5-21-4246540608-865900945-522504025-1000\$rt0fqke |
|
30.4% |
|
|
14.9% |
|
|
6.7% |
|
|
6.2% |
|
|
6.2% |
|
|
4.1% |
|
|
3.1% |
|
|
2.6% |
|
|
2.6% |
|
|
2.6% |
|
|
2.1% |
|
|
2.1% |
|
|
1.5% |
|
|
1.5% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
1.0% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
| Windows 10 |
78.1% |
|
| Windows 7 |
16.3% |
|
| Windows 8.1 |
4.6% |
|
| Windows Embedded 8.1 |
1.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00001000 |
| Name |
Size of data |
MD5 |
| .code |
127488 |
d30a89fdc0dd0bccb459f9d0b12b444e |
| .text |
591360 |
432fd82cd2cf0a8dca56f6c0d81dd2fc |
| .rdata |
116736 |
c1b579a3d9d970c625d3dda4205e7c7b |
| .data |
10896384 |
9b79534113e8743404b5cd0f1f3b548e |
| .rsrc |
84480 |
3e6012a7d2471aeeaed0cdf582c06802 |
| .modplug |
0 |
00000000000000000000000000000000 |
