How to remove KMScmd.exe
KMScmd.exe
The module KMScmd.exe has been detected as Hack.AutoKMS
File Details
| Product Name: | KMScmd |
| Company Name: | MSfree Inc. |
| MD5: | 2f736916126cfc09a791bfe7af7ce418 |
| Size: | 365 KB |
| First Published: | 2019-04-08 15:11:46 (6 years ago) |
| Latest Published: | 2025-01-03 23:02:07 (10 months ago) |
| Status: | Hack.AutoKMS (on last analysis) | |
| Analysis Date: | 2025-01-03 23:02:07 (10 months ago) |
Common Places:
| %sysdrive%\программы\активаторы windows & office |
| %sysdrive%\sources\$oem$\$$\setup\scripts |
| %sysdrive%\2-1\soft-x2\win7激活工具\microsoft kms activator aio v25.08.2013 |
| %sysdrive%\system volume information\_restore{e52ed4d6-7f3c-459b-849b-a2b4dcc98585} |
Geography:
| 25.0% | ||
| 25.0% | ||
| 25.0% | ||
| 25.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x000514ee |
.NET Info:
| MVID: | e7fc445e-61fb-4eeb-b0a4-7f7b24892361 |
| Typelib ID: | fcad9796-cfc1-41fa-93da-378996c2a356 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 325120 | 3897046fe3d29b6640ad00544397556c |
| .rsrc | 48128 | 8e76bd73ef3cb97f035bba0c879ef426 |
| .reloc | 512 | 5122235c76fe3403795b91f92c58d7a3 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for KMScmd.exe
