How to remove RemoveWAT.exe
- File Details
- Overview
- Analysis
RemoveWAT.exe
The module RemoveWAT.exe has been detected as Hack.KMS
File Details
Product Name: |
|
Company Name: |
|
MD5: |
13eb74d03da0836a16f7b2a2b1d61835 |
Size: |
6 MB |
First Published: |
2018-05-06 02:06:38 (6 years ago) |
Latest Published: |
2018-05-06 02:06:38 (6 years ago) |
Status: |
Hack.KMS (on last analysis) |
|
Analysis Date: |
2018-05-06 02:06:38 (6 years ago) |
%sysdrive%\instaladores\w7 |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0064349e |
MVID: |
7ccda90b-2b15-47c5-a498-d1d708c83e88 |
Typelib ID: |
0e768eb8-c71c-4b52-bea8-92e4e837be70 |
Name |
Size of data |
MD5 |
.text |
6559232 |
cd58eec891436a99c9c8b46bc444f88e |
.sdata |
512 |
79084d6617b55d8a0565e0bed01590dc |
.rsrc |
102400 |
9a4de133076c477610ebe1d52ec28880 |
.reloc |
512 |
bdfa2e6deb75f736bd154264b16f6fb7 |