| 在线病毒检测器 | v.1.0.179.174 |
| 数据库版本: | 2024-06-13 13:00:16 |
AutoKMS 是一个潜在的恶意工具，通常与非法激活 Microsoft Windows 和 Microsoft Office 产品相关。它旨在绕过正版激活过程并在没有合法许可的情况下激活软件，这是非法的，可能会使用户面临各种风险，包括法律后果和安全威胁。
| File | Office 2010 Toolkit.exe |
| 已检查 | 2024-06-13 10:36:06 |
| MD5 | 90fb5b689a606ed31b8a9a0dbc9b5230 |
| SHA1 | 7e5cf9dc783bfbeb0d92c74619d643a27d003752 |
| SHA256 | b3556114f4518a8c911bf5aa07aa13ea75b0db59d52441aa9cea8ca3e0aefcc9 |
| SHA512 | f883ff476180ec21191d206c1ee281881433f030477a79de800a673e337d3d0fb3a88b604d53eb37b87675f0a2c65487856b33fdc3972f985cce26ebb670446a |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 13805056 bytes |
Gridinsoft能够识别并消除Hack.Win32.AutoKMS.ns，无需进一步的用户干预。
| Translation | 0x0000 0x04b0 |
| FileDescription | Office 2010 Toolkit |
| FileVersion | 2.0.0.0 |
| InternalName | Office 2010 Toolkit.exe |
| LegalCopyright | CODYQX4 |
| OriginalFilename | Office 2010 Toolkit.exe |
| ProductName | Office 2010 Toolkit |
| ProductVersion | 2.0.0.0 |
| Assembly Version | 1.0.0.0 |
 |
2b191564eb090276662ab44b2aaa212c df325c5178a27a118d3f1bbccee3ce48 050d0d2d59390903 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x010d0dce |
| Compilation: | 2010-08-06 20:51:53 |
| Checksum: | 0x00000000 (Actual: 0x00d34c53) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 3 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 9 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00002000 | 0x00ccedd4 | 0x00ccee00 | 1659f011b2f2d78e3ad7c439abbada7f | 6.64 |
| .rsrc | 0x00cd2000 | 0x0005b370 | 0x0005b400 | 7ac462451b180a8ca2fa12220b44b6c3 | 4.47 |
| .reloc | 0x00d2e000 | 0x0000000c | 0x00000200 | 81bb1ecdc2beb7cd7e282133aa2691ea | 0.08 |
