How to remove KMSELDI.exe

KMSELDI.exe Removal: How to Get Rid of KMSELDI.exe132e4fd0484610a64d6d9580c331e647

KMSELDI.exe

The module KMSELDI.exe has been detected as Hack.KMS

KMSELDI.exe
Product Name:

KMS GUI ELDI

MD5: 132e4fd0484610a64d6d9580c331e647
Size: 902 KB
First Published: 2017-05-24 13:09:05 (2 years ago)
Latest Published: 2019-10-21 16:15:43 (a day ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-10-21 16:15:43 (a day ago)
Signed By: ByELDI Certificate
Status: Valid
%programfiles%\kmspico
%programfiles%
%windir%
%desktop%\memoria\activadores
%desktop%\respaldo memeria\programas\activadores
%desktop%\miguel olmos\nueva carpeta (3)\programas\activadores
%programfiles%
%programfiles%
%programfiles%
%programfiles%
27.9%
10.6%
7.7%
5.8%
5.8%
5.8%
4.8%
3.8%
3.8%
2.9%
2.9%
1.9%
1.9%
1.9%
1.9%
1.9%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
Windows 7 36.4%
Windows 8.1 34.6%
Windows 10 18.7%
Windows 8 8.4%
Windows Server 2012 R2 0.9%
Windows Embedded 8.1 0.9%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000dd42e

.NET Info:

MVID: 3593f3df-b4c6-4020-90a3-ca75172795f9
Typelib ID: 863d9135-9365-4bee-95bf-0d83ded34d9f

PE Sections:

Name Size of data MD5
.text 898560 9ff196ca3b0eb84f28b919f2f235816a
.sdata 512 0cfddbe7e2bc6fca1198376791fa91f9
.rsrc 20992 2dd347fc7d7b538370c0b94eb8d5975a
.reloc 512 39a616f300f6ed63b9819394116bce24

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSELDI.exe