How to remove Service_KMS.exe
- File Details
- Overview
- Analysis
Service_KMS.exe
The module Service_KMS.exe has been detected as Risk.Gen
File Details
| Product Name: |
|
| MD5: |
c471c170bfb078deb5cf7c270d47b529 |
| Size: |
1 MB |
| First Published: |
2017-05-25 04:09:14 (6 years ago) |
| Latest Published: |
2020-12-11 23:26:58 (3 years ago) |
| Status: |
Risk.Gen (on last analysis) |
|
| Analysis Date: |
2020-12-11 23:26:58 (3 years ago) |
Overview
| %programfiles%\kmspico |
| %programfiles%\emco\network malware cleaner 4\quarantine\signature threats\dc2\nmc.exploit.win32.ms.kfef\files\program files\kmspico |
| %sysdrive%\windows.old\program files\kmspico |
| %programfiles% |
| %appdata%\zhp |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
| %programfiles% |
|
19.1% |
|
|
14.7% |
|
|
11.0% |
|
|
10.3% |
|
|
5.9% |
|
|
4.4% |
|
|
2.9% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
1.5% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
| Windows 7 |
38.7% |
|
| Windows 10 |
29.2% |
|
| Windows 8 |
18.2% |
|
| Windows 8.1 |
13.9% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x00101a5e |
| MVID: |
ec2c4491-2f4c-43df-9d2e-1d59e7a7153d |
| Name |
Size of data |
MD5 |
| .text |
1047552 |
b34211c3ba0142a1bfae96dd327e8a1b |
| .sdata |
512 |
1c8033a9b5e9c5cac557f1a85297765f |
| .rsrc |
15360 |
98ff089b15698114fdcd82012695320e |
| .reloc |
512 |
fd8ecf8aa9307f92148fa13abd35ccf2 |
