| 在线病毒检测器 | v.1.0.209.174 |
| 数据库版本: | 2025-02-22 00:00:23 |
这是一个通用检测名称，用于识别具有特洛伊木马特征的潜在有害或可疑文件或程序。这是一种伪装成合法或良性程序但包含恶意代码或功能的恶意软件。
| File | kmyHook.exe |
| 已检查 | 2025-02-21 22:37:26 |
| MD5 | e19136108cebb220fda77b66109296fb |
| SHA1 | 66fd0074a473472a0a4083100fc6a47b4cccc5e2 |
| SHA256 | 44edab517ff19300e186c49fed0e326b51bd9d5cfbe8532c3f6528c12129a718 |
| SHA512 | e41696df2e1fc1c9b4bfa4285c6fa849ef4533c0b2d145463fa1d4bd900bacf0e72fd59ffe6fa6f39dc122a220a62153375cc35aecbf60fa81fb77fa97cc1182 |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 349384 bytes |
Gridinsoft能够识别并消除Trojan.Win32.Gen.oa!s1，无需进一步的用户干预。
| Translation | 0x0000 0x04b0 |
| Comments | |
| CompanyName | |
| FileDescription | DotNetDetour |
| FileVersion | 1.0.0.0 |
| InternalName | kmyHook.exe |
| LegalCopyright | Copyright © 2015 |
| LegalTrademarks | |
| OriginalFilename | kmyHook.exe |
| ProductName | DotNetDetour |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x004538b2 |
| Compilation: | 2100-06-21 14:47:11 |
| Checksum: | 0x0005e48f (Actual: 0x0005e48f) |
| OS Version: | 4.0 |
| PDB Path: | C:\Users\Cirno\Documents\rpgProjs\loaders\kmyHook\obj\Release\kmyHook.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | OK |
| Sections: | 3 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 2 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00002000 | 0x00051c10 | 0x00051e00 | d11eaec333eb6570fb60f98c687b9296 | 6.01 |
| .rsrc | 0x00054000 | 0x000005b4 | 0x00000600 | 6be097717ed142380dec9da5e3cc9aa3 | 4.10 |
| .reloc | 0x00056000 | 0x0000000c | 0x00000200 | 6576f000f8e2b3ad815ee99215a2f17e | 0.10 |
