How to remove KMSELDI.exe

KMSELDI.exe

The module KMSELDI.exe has been detected as Hack.KMS

KMSELDI.exe
Remove KMSELDI.exe

File Details

Product Name:

KMS GUI ELDI
MD5: aebef79b545cf0f1850676578b643d02
Size: 674 KB
First Published: 2017-06-09 14:05:29 (7 years ago)
Latest Published: 2020-03-15 21:34:43 (4 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-03-15 21:34:43 (4 years ago)

Common Places:

%programfiles%\kmspico
%programfiles%
%programfiles%

Geography:

69.2%
15.4%
15.4%

OS Version:

Windows 10 46.2%
Windows 7 30.8%
Windows 8.1 23.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000a4e7e

.NET Info:

MVID: 31746664-0ccb-473b-956f-2fed87937e89
Typelib ID: 863d9135-9365-4bee-95bf-0d83ded34d9f

PE Sections:

Name Size of data MD5
.text 667648 babad93cf838c2538e01425c2dc8247d
.sdata 512 0804bea1f2f99ef5be1704b78feac8b3
.rsrc 20992 ebfbcb427fbc8a44ec2eb2b865f8a958
.reloc 512 fa8fa036cc7fad93ab90dcca63b00071

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSELDI.exe
copyright for information about KMSELDI.exe