kmsauto+net+2015+windows+8.1+activator+free+download_10924_i39597315_il345.exe.zip

The file kmsauto+net+2015+windows+8.1+activator+free+download_10924_i39597315_il345.exe.zip has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install. The file has been seen being downloaded from downprov.red-2-small-button.com.
MD5:
cbd4f7ca16d7abc83b9ce53c366f9463

SHA-1:
4d794e40cb87d2c01b8e939132ed84628851cff7

SHA-256:
c85c88895ffff4493342d7ec7eb9fedad71132530ded5540a54aca74cec390c5

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/17/2025 11:14:55 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Amonetize (M)
16.8.1.15

File size:
1.5 MB (1,542,164 bytes)

Common path:
C:\users\{user}\downloads\kmsauto+net+2015+windows+8.1+activator+free+download_10924_i39597315_il345.exe.zip

The file kmsauto+net+2015+windows+8.1+activator+free+download_10924_i39597315_il345.exe.zip has been seen being distributed by the following URL.