How to remove gKMSELDI.exe

gKMSELDI.exe

The module gKMSELDI.exe has been detected as Crack.AutoKMS

gKMSELDI.exe
Remove gKMSELDI.exe

File Details

Product Name:

KMS GUI ELDI
Company Name:

@ByELDI
MD5: edb001208bd35f6912b9f83732d68ee5
Size: 897 KB
First Published: 2017-05-25 09:04:40 (6 years ago)
Latest Published: 2021-01-06 05:50:12 (3 years ago)
Status: Crack.AutoKMS (on last analysis)
Analysis Date: 2021-01-06 05:50:12 (3 years ago)

Overview

Signed By: @ByELDI
Status: Valid

Common Places:

%programfiles%\kmspico
%sysdrive%\kmspico
%programfiles%
%sysdrive%\程式集
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%
%programfiles%

File Names:

KMSELDI.exe
gKMSELDI.exe

Geography:

23.2%
10.3%
10.3%
7.7%
5.7%
5.2%
3.6%
3.1%
2.6%
2.6%
2.1%
2.1%
1.5%
1.5%
1.5%
1.5%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
1.0%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%

OS Version:

Windows 8.1 64.1%
Windows 10 28.2%
Windows 7 7.2%
Windows Server 2012 0.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000dbe5e

.NET Info:

MVID: a5de6d60-ef17-41c0-980f-e90ea2c1b47e

PE Sections:

Name Size of data MD5
.text 892928 0107a4039ac09c7c609a163d6c20d202
.rsrc 20992 5f677ef121cdf8e0cc9ef18fb9398776
.reloc 512 6d0a47428b55c8ab26bded25f7e9feb0

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for gKMSELDI.exe
copyright for information about gKMSELDI.exe