To encrypt your personal files and demand payment.
: In official corporate environments, Microsoft allows computers to activate against a central KMS server on the local network rather than contacting Microsoft directly. KMSAuto tricks the operating system into thinking it has successfully connected to one of these legitimate corporate servers. Temporary vs. Permanent : Standard KMS activations are temporary, usually lasting kmsauto 1.7.8
Analysis of the software's behavior in sandbox environments (like ANY.RUN ) shows several suspicious activities: Action Detected To encrypt your personal files and demand payment