home

kmsremovaltool.exe

Kaspersky Lab

Publisher:
Kaspersky Lab  (signed and verified)

MD5:
53a13604d35ff9b9b9b330457a91c212

SHA-1:
33f0fee0ed8bc11e1388b6e10b3b4f415da2ef9f

SHA-256:
50600fef5efa78d45d0967fc89e84e3733315d54d1e7bc5f446e93652426d3ce

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/12/2025 11:08:12 PM UTC  (a few moments ago)

File size:
13.5 KB (13,848 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\kmsremovaltool.exe

Digital Signature
Signed by:
Kaspersky Lab

Authority:
Root Agency

Valid from:
12/31/1999 4:00:00 PM

Valid to:
12/31/2039 6:59:59 PM

Subject:
CN=Kaspersky Lab

Issuer:
CN=Root Agency

Serial number:
135FC078A82BD68147E3271E7398B028

File PE Metadata
Compilation timestamp:
8/19/2010 8:29:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:

Linker version:
8.0

CTPH (ssdeep):
192:2+cnCZQLtalTk7+07l8nFY1anGI0AU4nLtyIJWIoCawdt:VcSQLIRuP8G1aGzAU4LHVtaw/

Entry address:
0x2474

Entry point:
0D, C0, A0, E1, F0, 58, 2D, E9, 1C, B0, 8D, E2, 04, D0, 4D, E2, 03, 40, A0, E1, 02, 50, A0, E1, 01, 60, A0, E1, 00, 70, A0, E1, 27, 00, 00, EB, 04, 30, A0, E1, 05, 20, A0, E1, 06, 10, A0, E1, 07, 00, A0, E1, 9A, FE, FF, EB, 00, 40, A0, E1, 20, 40, 0B, E5, 01, 00, 00, EA, 00, 40, A0, E1, 79, 00, 00, EB, 04, 00, A0, E1, 77, 00, 00, EB, F0, 68, 1B, E9, 1E, FF, 2F, E1, 04, E0, 2D, E5, 00, 30, 90, E5, 00, 10, A0, E1, 00, 00, 93, E5, 0A, 01, 00, EB, 04, F0, 9D, E4, 30, 40, 2D, E9, 40, 50, 9F, E5, 0B, 4A, A0, E3...
 
[+]

Entropy:
5.2136

Code size:
6.5 KB (6,656 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.