File Name | AdskNLM.exe |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.184.174 |
Database Version | 2024-08-13 10:00:28 UTC |
Malware family: Gen
Hash Type | Value | Action |
---|---|---|
MD5 |
d2d93e72797d33104639839147e9b7e1
|
|
SHA1 |
2e45399bc6ec5bcb259140f269b0618c8227b2a2
|
|
SHA256 |
830646ba0ef57b11ac24a9778806a94ee72a7cc7546b8e46c11bf6c9111cde55
|
|
SHA512 |
98b99fd7cef6a97904b1175f59db88e67d839915482e174c7859eb4dc73737b97a4604f41bf11dd35418dffc83354cd3a8534bdd9487319145f2026e16780751
|
|
ImpHash |
d3bbfd624fcfeb095c7bf0242b723cee
|
Icon |
Hash: a3397fd753edf3315c5ee39acdb04ac6
Fuzzy: 4ffbf82122e16db27464e30757c88930 dHash: b07064ecc6c69c8c |
Image Base | 0x140000000 |
Entry Point | 0x14001fe7c |
Compilation Time | 2016-03-05 12:48:50 |
Checksum | 0x00070f59 (Actual: 0x00f9b278) |
OS Version | 4.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
9 libraries
COMCTL32, SHELL32, GDI32, ADVAPI32, USER32, ole32, OLEAUT32, KERNEL32, msvcrt |
Exports | 0 functions |
Resources | 26 Resources |
Sections | 5 Sections |
CompanyName | X-Force & m0nkrus |
FileDescription | Autodesk Cracked NLM Installer (X-Force method) |
FileVersion | 2.0.0.0 |
InternalName | AdskNLM |
LegalCopyright | Copyright © 2021 X-Force & m0nkrus |
OriginalFilename | AdskNLM.exe |
PrivateBuild | April 20, 2021 |
ProductName | Autodesk Cracked NLM |
ProductVersion | 2.0.0.0 |
Translation | 0x0000 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
128,456 bytes | 128,512 bytes | 6.36 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
7BBC0A60DF0E6A027C3E174C8B743D5D |
.rdata |
0x00021000 |
25,288 bytes | 25,600 bytes | 5.16 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
2D3711B98C2BBEDA3F7D3263CA458842 |
.data |
0x00028000 |
20,624 bytes | 3,072 bytes | 2.82 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
B9DC6739A9755411E5ED470CD931EE39 |
.pdata |
0x0002e000 |
6,924 bytes | 7,168 bytes | 5.11 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
1F13F6936A2419FBC491439AEA8665EC |
.rsrc |
0x00030000 |
251,410 bytes | 251,904 bytes | 5.27 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DDB4742E9ACCD5FE7301C962829CB59A |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 23 | 247,995 bytes | |
RT_GROUP_ICON | 1 | 328 bytes | |
RT_VERSION | 1 | 884 bytes | |
RT_MANIFEST | 1 | 838 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Crack.Win64.Gen.cl without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system