How to remove KMSELDI.exe
- File Details
- Overview
- Analysis
KMSELDI.exe
The module KMSELDI.exe has been detected as Hack.KMS
File Details
Product Name: |
|
MD5: |
b15b2b73abaf027b4ff263ac55b58773 |
Size: |
677 KB |
First Published: |
2017-05-31 05:08:28 (6 years ago) |
Latest Published: |
2020-10-01 11:13:05 (3 years ago) |
Status: |
Hack.KMS (on last analysis) |
|
Analysis Date: |
2020-10-01 11:13:05 (3 years ago) |
%programfiles%\kmspico |
%temp%\ir_ext_temp_0\autoplay\docs\ad.exe |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles% |
%programfiles%\microsoft office |
%programfiles% |
|
69.4% |
|
|
5.6% |
|
|
5.6% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
|
2.8% |
|
Windows 7 |
52.6% |
|
Windows 10 |
21.1% |
|
Windows 8.1 |
15.8% |
|
Windows XP |
7.9% |
|
Windows 8 |
2.6% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000a590e |
MVID: |
5e247aee-0235-4918-a0c3-bb21c1cf7463 |
Typelib ID: |
863d9135-9365-4bee-95bf-0d83ded34d9f |
Name |
Size of data |
MD5 |
.text |
670208 |
c458865e860b3a7eab0fa0c0c2637482 |
.sdata |
512 |
9a17dcf6ec80ecb8d5ed1ea641e0957e |
.rsrc |
20992 |
9d7646ed7901e1af1554cc23c2d3f55a |
.reloc |
512 |
6fa04f39d1563e6a4a2d4387e0c7936e |