How to remove kso.dll
kso.dll
The module kso.dll has been detected as Ransom.Filecoder
File Details
| Product Name: | WPS Office |
| Company Name: | Zhuhai Kingsoft Office Software Co.,Ltd |
| MD5: | f09f56be1d05f0ad56b489cb9813385b |
| Size: | 31 MB |
| First Published: | 2018-06-02 08:10:16 (6 years ago) |
| Latest Published: | 2018-06-02 09:05:45 (6 years ago) |
| Status: | Ransom.Filecoder (on last analysis) | |
| Analysis Date: | 2018-06-02 09:05:45 (6 years ago) |
Overview
| Signed By: | Zhuhai Kingsoft Office Software Co., Ltd. |
| Status: | Valid |
Common Places:
| %profile%\downloads\temp |
| %profile%\downloads\kingsoft |
| %profile%\downloads\temp\wps office premium 10.2.0.6051\wps office\local\modified\@programfilesx86@\wps office\10.2.0.6051 |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x0000100f |
PE Sections:
| Name | Size of data | MD5 |
| .text | 18016768 | 47e4f8ad9291c34e3a494632c65080ac |
| .rdata | 11457024 | f137f1164f3d7bdaec625d84de600948 |
| .data | 952832 | 34fd9027b37c51531e67a9c3dcd4fae1 |
| .tls | 512 | bf619eac0cdf3f68d496ea9344137e8b |
| .syzygy | 1024 | 8fbb7f86d4e0b4301d0e70ddf55bb35d |
| .rsrc | 183808 | acca9c3f4e5e5b75a0bb0d7db329dc81 |
| .reloc | 2229760 | 38c3c926b083307679034f6c229fab21 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for kso.dll
