Should I block it?
Yes, 98% block recommendation.
Possible reason:
Multiple malware detections
kmsemulator.exe
| MD5: | 485055033bcddfde56325c0d2feea4f2 |
| SHA1: | 2aa967aaccab9a353fc818b2831b5532d7f47378 |
| SHA256: | 985c3972712218c62d2418b41056dba5fe883ca5104d8ec12041f8611db344f9 |
Warning 20 antivirus scanners has detected malware.
Overview
kmsemulator.exe has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This particular version is usually found on Microsoft Windows XP (5.1.2600.196608).
Details
| File name: | kmsemulator.exe |
| Typical file path: | C:\windows\kmsemulator.exe |
| Size: | 148 KB (151,552 bytes) |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Windows firewall allowed program
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\WINDOWS\KMSEmulator.exe'
Malware detections
Based on 40+ industry antivirus scanners, 20 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Agnitum |
5.5.1.3 |
HackTool.Keygen!0MY2AQ6aVKo |
| AhnLab V3 Internet Security |
2013.04.11 |
Trojan/Win32.Gen |
| AVG |
2014.0.3629 |
Crack.CO |
| CAT Quick Heal |
4.13.12.00 |
HackTool.Keygen (Not a Virus) |
| Commtouch |
5.4.1.7 |
W32/Trojan.GMMB-7646 |
| Comodo Internet Security |
15883 |
Application.Win32.Keygen |
| eSafe |
7.0.17.0 |
Win32.SPRTool.Keygen |
| ESET NOD32 |
7.8214 |
a variant of Win32/HackKMS.A |
| Fortinet |
5.0.43.0 |
W32/Keygen.DX!tr |
| Ikarus |
T3.1.4.0.0 |
not-a-virus.ActivationTool.KMS |
| K7 AntiVirus |
9.164.8506 |
Riskware |
| McAfee |
5.400.1158 |
Generic PUP.z!fr |
| McAfee Gateway Anti-Malware |
v2012.1-dat |
Generic PUP.z!fr |
| Norman |
7.00.22 |
Suspicious_Gen2.BVFND |
| PC Tools |
9.0.0.2 |
Trojan.Gen |
| Sophos |
4.87.0 |
Troj/Keygen-DX |
| Symantec |
20121.3.0.76 |
Trojan.Gen.2 |
| Trend Micro |
9.740.0.1012 |
TROJ_SPNR.04EG11 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.R4FH1CI |
| VIPRE Antivirus |
16738 |
Trojan.Win32.Generic!BT |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
100.00% |
|
