How to remove RemoveWAT.exe
- File Details
- Overview
- Analysis
RemoveWAT.exe
The module RemoveWAT.exe has been detected as Hack.KMS
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
76cc42148d2aab9fd67843208d999a90 |
| Size: |
6 MB |
| First Published: |
2018-01-24 10:07:58 (6 years ago) |
| Latest Published: |
2018-01-24 10:07:58 (6 years ago) |
| Status: |
Hack.KMS (on last analysis) |
|
| Analysis Date: |
2018-01-24 10:07:58 (6 years ago) |
| %sysdrive%\sw56.koe\โปรลบการเช็ตลิขสิทธิของวินโด้7ทุกเวอร์ช่ัน |
| %sysdrive%\sw32gb\โปรลบการเช็ตลิขสิทธิของวินโด้7ทุกเวอร์ช่ัน |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x0064390e |
| MVID: |
16aec3b0-2f29-41dc-ad48-2eea4892b5b8 |
| Typelib ID: |
0e768eb8-c71c-4b52-bea8-92e4e837be70 |
| Name |
Size of data |
MD5 |
| .text |
6560256 |
66f531f33f15166fd3e57df18c8b79b1 |
| .rsrc |
103424 |
4901cd02426b7125185b18ec3f292850 |
| .reloc |
512 |
7e816b279f774ff3bb7a4a28fafc6f1b |
