How to remove KMSpico_setup.exe

KMSpico_setup.exe

The module KMSpico_setup.exe has been detected as Hack.KMS

KMSpico_setup.exe
Remove KMSpico_setup.exe

File Details

Product Name:

KMSpico

Company Name:

MD5: fc032ce26d0a82cac2b1b336d3433eee
Size: 2 MB
First Published: 2017-05-25 07:10:58 (6 years ago)
Latest Published: 2020-11-06 19:11:37 (3 years ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2020-11-06 19:11:37 (3 years ago)

Overview

Signed By: ByELDI Certificate
Status: Valid

Common Places:

%desktop%\kmspico 9.06.20131120 install
%desktop%\bime\office 2010 sp2\crack.exe
%mydoc%\ativadores\2013
%profile%\desktop
%desktop%\office 2013
%sysdrive%\$recycle.bin\s-1-5-21-2130012104-2055952146-1731904964-1001
%desktop%
%sysdrive%\setup\crack win\crack office 2013 - windows 8.1
%sysdrive%\programas novos
%sysdrive%\dimi\programas\microsoft office proplus 2013 activator

File Names:

Activator.exe
KMSpico_setup.exe
Setup.exe
KMSpico.exe
$RALTQIM.tmp
KMSpico.v9.0.6.20131120_[www.downloadVar.IR].exe
Crack 1.exe
k.exe

Geography:

36.8%
16.8%
12.9%
8.4%
5.8%
3.2%
2.6%
1.9%
1.9%
1.3%
1.3%
1.3%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%

OS Version:

Windows 7 46.5%
Windows 10 30.6%
Windows 8.1 17.2%
Windows 8 1.9%
Windows Server 2008 R2 1.9%
Windows XP 1.3%
Windows Server 2012 R2 0.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 c3bd95c4b1a8e5199981e0d9b45fd18c
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 23552 b8d05f32f3a8c90b37183ffe138fe7ea

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSpico_setup.exe
copyright for information about KMSpico_setup.exe