home

sam5c956mck.exe

The application sam5c956mck.exe has been detected as a potentially unwanted program by 29 anti-malware scanners.
MD5:
f1f394d970d260a7966a9afeea4039fa

SHA-1:
2c9b22ee445f514acbfdc27c7d1bbf1f2030a1be

SHA-256:
ee1836f688891949d63568fa6eb19db4619ef0541cbee0be13b4febe60615387

Scanner detections:
29 / 68

Status:
Potentially unwanted

Analysis date:
5/4/2024 5:07:21 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.10141850
667

AegisLab AV Signature
AdWare.W32.MegaSearch
2.1.4+

Agnitum Outpost
Riskware.HackTool
7.1.1

Avira AntiVirus
APPL/KMSAuto.bes
7.11.197.44

avast!
Win32:Malware-gen
2014.9-150409

AVG
Potentially harmful program HackTool.AHDM
2014.0.4311

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.1549

Bitdefender
Trojan.Generic.10141850
1.0.20.495

Bkav FE
W32.Clod0b2.Trojan
1.3.0.4924

Clam AntiVirus
Win.Trojan.Hacktool-1756
0.98/21511

Emsisoft Anti-Malware
Trojan.Generic.10141850
8.15.04.09.05

ESET NOD32
Win32/HackTool.KMSAuto (variant)
9.9434

Fortinet FortiGate
Riskware/KMSAuto
4/9/2015

F-Prot
W32/A-0b50412c
v6.4.7.1.166

F-Secure
Trojan.Generic.10141850
11.2015-09-04_5

G Data
Trojan.Generic.10141850
15.4.24

herdProtect (fuzzy)
variant of zj3bfl13cb2.exe
2015.7.12.4

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.2.2.29

K7 AntiVirus
Hacktool
13.202.15530

McAfee
Artemis!E858AD1B421B
5600.6801

MicroWorld eScan
Trojan.Generic.10141850
16.0.0.297

nProtect
Trojan.Generic.10141850
14.02.04.01

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.9.1

Rising Antivirus
PE:Malware.Hacktool!6.1FB
23.00.65.15407

Sophos
PUA 'KMS Activator'
5.12

SUPERAntiSpyware
Trojan.Agent/Gen-Lameshield
9947

Trend Micro House Call
TROJ_GEN.F47V1009
7.2.99

VIPRE Antivirus
Trojan.Win32.Generic
26558

Zillya! Antivirus
Tool.KMSAuto.Win32.3
2.0.0.2132

File size:
255 KB (261,149 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\kmspico\sam5c956mck.exe

File PE Metadata
Compilation timestamp:
3/3/2013 5:03:45 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

CTPH (ssdeep):
3072:limnSqvg5laDT+i1fvyKCI5l5ARSpkzgB65+eSCRR+VTeqGvBFzcSk1+Q+:lyq4X4vZjlYSizi6DL+Vl6BcMQ+

Entry address:
0x1296F

Entry point:
E8, 99, 98, 00, 00, E9, 87, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 24, 89, 43, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, D8, 05, 43, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, 24, 89, 43, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00...
 
[+]

Entropy:
6.3775

Code size:
156 KB (159,744 bytes)

Remove sam5c956mck.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.