How to remove oem.exe
oem.exe
The module oem.exe has been detected as Hack.AutoKMS
File Details
| Product Name: | oem |
| MD5: | 7a6b28b741e1e8daf9e7f1939bbfcf1e |
| Size: | 1 MB |
| First Published: | 2017-05-29 16:02:26 (7 years ago) |
| Latest Published: | 2021-01-06 05:59:26 (4 years ago) |
| Status: | Hack.AutoKMS (on last analysis) | |
| Analysis Date: | 2021-01-06 05:59:26 (4 years ago) |
Common Places:
| %temp%\rarsfx3 |
| %temp%\rarsfx2 |
| %temp%\rarsfx1 |
| %temp%\rarsfx0 |
| %sysdrive%\windows.old\users\sudibio mutiara\appdata\local\temp\rarsfx1 |
| %sysdrive%\windows.old\users\sudibio mutiara\appdata\local\temp\rarsfx0 |
| %sysdrive% |
| %temp% |
| %temp% |
| %sysdrive% |
Geography:
| 29.5% | ||
| 13.6% | ||
| 9.1% | ||
| 9.1% | ||
| 6.8% | ||
| 4.5% | ||
| 4.5% | ||
| 4.5% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% | ||
| 2.3% |
OS Version:
| Windows 7 | 83.0% | |
| Windows 10 | 14.9% | |
| Windows 8 | 2.1% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00170b5e |
.NET Info:
| MVID: | 0e3bf765-1857-44a5-b78d-780476f95911 |
| Typelib ID: | 2ea5cb53-5f2b-43b5-99ee-5f587cb80993 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 1502208 | 63f6c3ab0060dcbe9964285f8814be21 |
| .sdata | 512 | fd7f249cdc2e847e905d36b8a50f328c |
| .rsrc | 3584 | c366ff7d8cf35f473ddce0a652e67da1 |
| .reloc | 512 | 72948dd6de96607511c9ace8e435ec81 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for oem.exe
