Examples of Troj/AutoKMS-A include:
Example 1
File Information
- Size
- 1.9M
- SHA-1
- 13ee8c9fce6f74512dcd188cca0655c5ede37612
- MD5
- 07605abeb10fc533881c91f19decf69a
- CRC-32
- 1105859f
- File type
- application/x-ms-dos-executable
- First seen
- 2011-08-02
Runtime Analysis
Dropped Files
- C:\AutoKMS.ini
- Size
- 715
- SHA-1
- 3c6e35ed2e1249b65432dbfbb0131043b54b88a1
- MD5
- f8d91d7f28f63d4abfa6fbb354c6351e
- CRC-32
- 7ceb1f6d
- File type
- application/octet-stream
- First seen
- 2011-12-26
- C:\AutoKMS.log
- Size
- 186
- SHA-1
- baf1149061d42e1e68282b90d2eac70f80e1368b
- MD5
- bcbb3a8a3f5ca75059ee6e1f82039945
- CRC-32
- 337dc92e
- File type
- application/octet-stream
- First seen
- 2012-01-04
- C:\WINDOWS\Tasks\AutoKMS.job
- Size
- 236
- SHA-1
- c3178d13d9add0814569e01e2aae7982dd9945d5
- MD5
- 7c7fc3af594a790b26c8c29cbd9f3c04
- CRC-32
- 0addf8dc
- File type
- application/data
- First seen
- 2012-01-04
Processes Created
- c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
Example 2
File Information
- Size
- 148K
- SHA-1
- 2aa967aaccab9a353fc818b2831b5532d7f47378
- MD5
- 485055033bcddfde56325c0d2feea4f2
- CRC-32
- 69fd4576
- File type
- Windows executable
- First seen
- 2011-05-05