How to remove kms-r@1n.exe
- File Details
- Overview
- Analysis
kms-r@1n.exe
The module kms-r@1n.exe has been detected as Trojan.Agent
File Details
| MD5: |
45cc0a256bed89a997725a6b264cc3ec |
| Size: |
22 KB |
| First Published: |
2017-05-24 11:11:58 (6 years ago) |
| Latest Published: |
2024-03-31 23:07:12 (2 weeks ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2024-03-31 23:07:12 (2 weeks ago) |
| %sysdrive%\windows |
| %windir% |
| %commonappdata%\roguekiller |
| %sysdrive%\system volume information\systemrestore\frstaging |
| %sysdrive%\6l7teu0tkomzlk4k |
| %commonappdata%\emco\malware destroyer 8\storage\quarantined threats\suspicious threats\desktop-ssbfrno\suspicious threat 6106\file |
| %sysdrive%\windows.old |
| %sysdrive%\$windows.~bt\newos |
| %sysdrive%\windows.old\cleanup\0000.~bt\newos |
| %sysdrive%\tmti4dekgr2xul3f |
| KMS-R@1n.exe |
| kms-r@1n.exe |
| 722AADD24867F346.vir |
| $RTHAN44.exe |
|
18.8% |
|
|
15.2% |
|
|
7.1% |
|
|
6.2% |
|
|
6.1% |
|
|
5.3% |
|
|
3.5% |
|
|
2.5% |
|
|
2.2% |
|
|
2.2% |
|
|
2.2% |
|
|
1.8% |
|
|
1.6% |
|
|
1.5% |
|
|
1.5% |
|
|
1.2% |
|
|
1.1% |
|
|
1.0% |
|
|
0.9% |
|
|
0.9% |
|
|
0.9% |
|
|
0.8% |
|
|
0.8% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 7 |
50.3% |
|
| Windows 10 |
38.6% |
|
| Windows 8.1 |
8.2% |
|
| Windows 8 |
1.3% |
|
| Windows XP |
1.0% |
|
| Windows Embedded Standard |
0.2% |
|
| Windows Embedded 8.1 |
0.1% |
|
| Windows Server 2003 |
0.1% |
|
| Windows Vista |
0.1% |
|
Analysis
| Subsystem: |
Windows CUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x00400000 |
| Entry Address: |
0x000029d8 |
| Name |
Size of data |
MD5 |
| .text |
7168 |
ed85baf3c4873556c1011eebb0f86eb0 |
| .rdata |
9728 |
87471a7db851bc2214bf7eaa406f81dc |
| .data |
2560 |
e756e9d7477a51377758805387f05486 |
| .rsrc |
1536 |
692912ded14f9eeffa4660f342163dcf |
| .reloc |
1024 |
fc16a013d4068a4e39c2a3db3189d42a |
