How to remove KMSELDI.exe
- File Details
- Overview
- Analysis
KMSELDI.exe
The module KMSELDI.exe has been detected as Hack.KMS
File Details
Product Name: |
|
MD5: |
4902f874baaae761c2eadb380fc64ad1 |
Size: |
665 KB |
First Published: |
2017-05-24 11:11:38 (7 years ago) |
Latest Published: |
2020-08-14 10:52:24 (4 years ago) |
Status: |
Hack.KMS (on last analysis) |
|
Analysis Date: |
2020-08-14 10:52:24 (4 years ago) |
%programfiles%\kmspico |
%programfiles% |
Windows 7 |
75.0% |
|
Windows 8 |
25.0% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000a28ce |
MVID: |
4c147740-ffac-47c0-a848-42da8f25de1b |
Typelib ID: |
863d9135-9365-4bee-95bf-0d83ded34d9f |
Name |
Size of data |
MD5 |
.text |
657920 |
4d4c1a42b40fe518a748cdf0dabe75ec |
.sdata |
512 |
4b8382e28162ca097cda9b5abaf46460 |
.rsrc |
20992 |
28f7a17250037b2aa2f084de72137dba |
.reloc |
512 |
47d9e20e79607a65ea4ed1d08ff82102 |