How to remove KMSELDI.exe

KMSELDI.exe Removal: How to Get Rid of KMSELDI.exe34e434262a6dfec694d134f8c005ef4c

KMSELDI.exe

The module KMSELDI.exe has been detected as Hack.KMS

KMSELDI.exe
Product Name:

KMS GUI ELDI

MD5: 34e434262a6dfec694d134f8c005ef4c
Size: 798 KB
First Published: 2017-05-26 21:04:23 (2 years ago)
Latest Published: 2019-10-15 12:14:51 (8 days ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-10-15 12:14:51 (8 days ago)
%programfiles%\kmspico
%appdata%\zhp\quarantine
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
19.9%
19.9%
15.7%
12.0%
4.8%
4.2%
3.6%
3.0%
1.8%
1.8%
1.2%
1.2%
1.2%
1.2%
1.2%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
Windows 8.1 47.0%
Windows 7 33.3%
Windows 10 19.0%
Windows Embedded 8.1 0.6%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000c3dce

.NET Info:

MVID: 0aef3477-f358-49a5-8012-05ba040480b1
Typelib ID: 863d9135-9365-4bee-95bf-0d83ded34d9f

PE Sections:

Name Size of data MD5
.text 794112 d7ad94597eac844f615abcf918e30d85
.sdata 512 1dd431f8f4b53aabaf4e01f870b5586d
.rsrc 20992 5213ac46553a38838f237a1e55f7e291
.reloc 512 68cb31106c016f9a1d1b49fc1a630279

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSELDI.exe