How to remove oem.exe
oem.exe
The module oem.exe has been detected as Hack.AutoKMS

File Details
Product Name: | oem |
MD5: | d078205b1721b935c5bf43d2071678dc |
Size: | 2 MB |
First Published: | 2017-05-21 14:10:10 (8 years ago) |
Latest Published: | 2024-04-07 23:01:39 (a year ago) |
Status: | Hack.AutoKMS (on last analysis) | |
Analysis Date: | 2024-04-07 23:01:39 (a year ago) |
Common Places:
%temp%\rarsfx0 |
%temp%\rarsfx1 |
%temp% |
%sysdrive%\new folder\elmasry\appdata\local\temp |
%sysdrive%\gorkem\karşıdan yüklemeler\programlar |
%temp% |
%temp% |
%temp% |
%temp% |
%temp% |
Geography:
Mexico | 23.6% | |
Vietnam | 11.5% | |
Indonesia | 8.8% | |
Israel | 4.7% | |
Romania | 4.1% | |
Philippines | 4.1% | |
Egypt | 4.1% | |
Spain | 2.7% | |
Nigeria | 2.7% | |
Greece | 2.7% | |
India | 2.7% | |
Russia | 2.0% | |
Iran | 2.0% | |
Suriname | 2.0% | |
Former Yugoslav Republic of Macedonia | 1.4% | |
Thailand | 1.4% | |
Poland | 1.4% | |
Colombia | 1.4% | |
Norway | 1.4% | |
Bosnia and Herzegovina | 1.4% | |
Netherlands | 1.4% | |
Turkey | 1.4% | |
Brazil | 1.4% | |
Peru | 1.4% | |
South Korea | 1.4% | |
Libya | 0.7% | |
Ukraine | 0.7% | |
United States | 0.7% | |
Serbia | 0.7% | |
Argentina | 0.7% | |
Chile | 0.7% | |
Albania | 0.7% | |
United Arab Emirates | 0.7% | |
Bolivia | 0.7% | |
Sudan | 0.7% | |
Finland | 0.7% |
OS Version:
Windows 7 | 64.4% | |
Windows 10 | 35.6% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x0029611e |
.NET Info:
MVID: | 818a7c38-c304-4d5f-92a9-b2b17bac7bb4 |
Typelib ID: | 2ea5cb53-5f2b-43b5-99ee-5f587cb80993 |
PE Sections:
Name | Size of data | MD5 |
.text | 2703872 | 2e411f3a5bb626eaa980226ba1341a71 |
.sdata | 512 | 964a21e7450d6d7968fad9d36b195e52 |
.rsrc | 3584 | 4756994e8a86514449e64ab89edc80d7 |
.reloc | 512 | 4135c58594c2e63d682506b4fa761242 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for oem.exe
