How to remove KMSpico_setup.exe

KMSpico_setup.exe

The module KMSpico_setup.exe has been detected as Hack.KMS

KMSpico_setup.exe
Product Name:

KMSpico

Company Name:

MD5: 5aa9ebb7e6cdaba23eeb28d03bec156d
Size: 2 MB
First Published: 2017-05-30 14:06:12 (7 years ago)
Latest Published: 2019-04-07 18:06:54 (5 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-04-07 18:06:54 (5 years ago)
Signed By: @ByELDI
Status: Invalid (digital signature could be stolen or file could be patched)
%profile%\downloads
%temp%\rar$exa0.815
%profile%\downloads\8_crack_office_20.rar\crack office 2013
%desktop%\kmspico_setup_hueit.net.zip
%profile%\downloads\compressed\kmspico_setup_hueit.net
%profile%\downloads\kmspico_10_phanmemaz.com.rar\kmspico_10_phanmemaz.com\kmspico install
%desktop%\linh tinh\phan mem
%profile%\downloads\kmspico_setup_hueit.net.zip
%sysdrive%\cong cu\congcu pc\activi window kmspico_10_phanmemaz.coactm.rar\kmspico_10_phanmemaz.com
%sysdrive%\$recycle.bin\s-1-5-21-1299236176-2724547173-272666555-1000
90.8%
2.3%
2.3%
1.1%
1.1%
1.1%
1.1%
Windows 10 48.3%
Windows 7 27.6%
Windows 8.1 20.7%
Windows Server 2012 R2 3.4%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 c3bd95c4b1a8e5199981e0d9b45fd18c
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 23552 f488def9fee6e9513007495d4b87140a

More information:

Download GridinSoft Anti-Malware - Removal tool for KMSpico_setup.exe