How to remove kmss.exe

kmss.exe

The module kmss.exe has been detected as Hack.KMS

kmss.exe
Product Name:

KMS Server Emulator (XP)

Company Name:

MDL Forum, mod by Ratiborus

MD5: f17cb16c4c9928fd9d6221f8bdd9d91e
Size: 302 KB
First Published: 2017-09-22 11:03:06 (7 years ago)
Latest Published: 2020-01-31 08:25:57 (5 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-01-31 08:25:57 (5 years ago)
Signed By: WZT
Status: Valid
%sysdrive%\softwares\microsoft office professional plus 2016 + activation tool [danhuk]\disc image\files
%desktop%\microsoft office 2013-2016 c2r install 5.3 by ratiborus\microsoft office 2013-2016 c2r install 5.3 by ratiborus\files
%windir%\files
%windir%\files
KMSS.exe
kmss.exe
22.2%
22.2%
11.1%
11.1%
11.1%
11.1%
11.1%
Windows 10 66.7%
Windows 7 33.3%
Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0001a204

PE Sections:

Name Size of data MD5
.text 207360 d8aad787c39d781c116f0919231dbab1
.rdata 72704 67fc2da58f75e794b84542f91054c25b
.data 8192 bb88a3c4507c720bced85d6e638666a6
.rsrc 1536 e38097deac19c40bf689bb64928a500d
.reloc 14848 6774796a514bde343bdfa8613ff15759

More information:

Download GridinSoft Anti-Malware - Removal tool for kmss.exe