How to remove KMSELDI.exe
- File Details
- Overview
- Analysis
KMSELDI.exe
The module KMSELDI.exe has been detected as Crack.AutoKMS
File Details
Product Name: |
|
Company Name: |
|
MD5: |
e1d8689f5e0944e974fc958b58c62d16 |
Size: |
1 MB |
First Published: |
2017-05-30 09:12:33 (7 years ago) |
Latest Published: |
2022-05-01 23:23:32 (2 years ago) |
Status: |
Crack.AutoKMS (on last analysis) |
|
Analysis Date: |
2022-05-01 23:23:32 (2 years ago) |
Overview
%programfiles%\kmspico |
%programfiles% |
%sysdrive%\microsoft toolkit collection pack february 2017\windows 10 - permenant activator\windows 10 activators |
%sysdrive%\backup verbatim usb 2018-04-18\microsoft toolkit collection pack february 2017\windows 10 - permenant activator\windows 10 activators |
%sysdrive%\windows.old\program files |
%programfiles% |
%sysdrive% |
%programfiles% |
%sysdrive%\software\softwares\ms office |
%programfiles% |
|
11.4% |
|
|
11.4% |
|
|
8.6% |
|
|
7.1% |
|
|
5.7% |
|
|
4.3% |
|
|
4.3% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
2.9% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
|
1.4% |
|
Windows 10 |
62.9% |
|
Windows 7 |
30.0% |
|
Windows 8.1 |
7.1% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x001162fe |
MVID: |
20e0cec7-2f63-403f-bcfe-39ee5e5c5963 |
Name |
Size of data |
MD5 |
.text |
1131520 |
b3c8668ac02607e7525d5d21af2fcd60 |
.rsrc |
20992 |
8deab088da843ba1905429404df67a36 |
.reloc |
512 |
524459b4b3e72410d54224e0f64ea2f2 |