How to remove OInstall.exe

OInstall.exe

The module OInstall.exe has been detected as Hack.AutoKMS

OInstall.exe
Product Name:

Office 2013-2024 C2R Install

MD5: c1cb9faebab25bbdee47989ed6d12b66
Size: 16 MB
First Published: 2025-06-21 23:01:24 (6 hours ago)
Latest Published: 2025-06-21 23:01:24 (6 hours ago)
Status: Hack.AutoKMS (on last analysis)
Analysis Date: 2025-06-21 23:01:24 (6 hours ago)
%profile%\office 2013-2024 c2r install_lite v7.7.7.7 r25
%profile%
100.0%
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00056a80

PE Sections:

Name Size of data MD5
.code 346624 371280f1e3a8ac975d8e8697edee8b3a
.text 1393664 119053599850186b2210e370efd9060b
'.text' 512 aec4484d7c8aabc2f1d66d45d3e6aaf2
.rdata 254464 7220ae5fb916dba2d9497072876a02a2
.gfids 512 3a0d0bd6932fef545bb6e9b378fb3eca
.00cfg 512 47588083e7ac7178fe95023b9461f53b
.data 15569920 1079ab5eb5dd2a3e3e7e9734bf952408
.rsrc 88064 ab6f71f1fd0e02f6235d6b1a7dcf4b12
.modplug 0 d41d8cd98f00b204e9800998ecf8427e

More information:

Download GridinSoft Anti-Malware - Removal tool for OInstall.exe