How to remove TmpB2E5.tmp

TmpB2E5.tmp

The module TmpB2E5.tmp has been detected as Virtool.AutoKMS

TmpB2E5.tmp
Remove TmpB2E5.tmp

File Details

Product Name:

KMSAuto Net
Company Name:

MSfree Inc.
MD5: f7cf83bca4d7c9210cc40211dabbe651
Size: 5 MB
First Published: 2017-05-22 10:20:06 (6 years ago)
Latest Published: 2021-11-06 21:20:33 (2 years ago)
Status: Virtool.AutoKMS (on last analysis)
Analysis Date: 2021-11-06 21:20:33 (2 years ago)

Common Places:

%commonappdata%\kmsautos
%windir%\setup\scripts
%localappdata%\temp
%desktop%\activators
%temp%\rar$exa0.075\ds.us kmsauto net 2014 v1.2.4 portable en
%commonappdata%\kmsauto
%sysdrive%\install_progiz\kmsauto_net_2014_v1.2.4_portable.[15.03.2014]\kmsauto net 2014 v1.2.4 portable en.zip\kmsauto net 2014 v1.2.4 portable en
%windir%\setup
%commonappdata%
%sysdrive%\microsoft office 2013 with sp1 [vlsc] english\kmsauto_net_2014_v1.2.4_portable.[15.03.2014]\kmsauto net 2014 v1.2.4 portable en.zip

File Names:

KMSAuto Net.exe
TmpB2E5.tmp

Geography:

23.3%
18.7%
12.6%
5.9%
4.2%
3.7%
3.7%
3.3%
2.6%
2.4%
2.0%
1.5%
1.5%
1.3%
1.1%
1.1%
0.9%
0.9%
0.7%
0.7%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.4%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%

OS Version:

Windows 8.1 81.2%
Windows 10 9.7%
Windows 7 8.2%
Windows 8 0.4%
Windows Vista 0.2%
Windows Server 2012 0.2%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00548c3e

.NET Info:

MVID: e30e5fe6-0a9a-4826-9e5f-d6cf8cf09c7c
Typelib ID: fcad9796-cfc1-41fa-93da-378996c2a356

PE Sections:

Name Size of data MD5
.text 5533184 58556f1634f2b3e14e194b55d30f74b4
.rsrc 48640 b3cf9e4fecd9a9e6fd54716a4d4360a6
.reloc 512 42f83b7f91f12e2fff75dda38c305b2f

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for TmpB2E5.tmp
copyright for information about TmpB2E5.tmp