How to remove kso.dll
kso.dll
The module kso.dll has been detected as Ransom.Filecoder
File Details
| Product Name: | WPS Office |
| Company Name: | Zhuhai Kingsoft Office Software Co.,Ltd |
| MD5: | 9237ff8a9058166eeeabedd110a9bc4a |
| Size: | 31 MB |
| First Published: | 2018-04-30 08:11:08 (6 years ago) |
| Latest Published: | 2018-09-29 05:08:08 (6 years ago) |
| Status: | Ransom.Filecoder (on last analysis) | |
| Analysis Date: | 2018-09-29 05:08:08 (6 years ago) |
Overview
| Signed By: | Zhuhai Kingsoft Office Software Co., Ltd. |
| Status: | Valid |
Common Places:
| %localappdata%\kingsoft\wps office\10.2.0.6020 |
| %programfiles%\kingsoft\kingsoft office\10.2.0.6020 |
Geography:
| 50.0% | ||
| 25.0% | ||
| 25.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x0000100f |
PE Sections:
| Name | Size of data | MD5 |
| .text | 18016768 | d5c233bf82dbc4e08cd03f7119663620 |
| .rdata | 11483648 | 57466f8f2ec0ba5c90d2c79f9152f587 |
| .data | 948736 | ca79b53497e13aa65b73fde883ac4caf |
| .tls | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .syzygy | 1024 | 33f7ba3d0d473b9480978e0bf58fece3 |
| .rsrc | 183808 | 76c152955cd37f8e34abb05dbdeb1e7c |
| .reloc | 2229760 | 26991c6ccac9dfd5dade356979c7e4c2 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for kso.dll
