Adlmint dll (Autodesk component) Autodesk, Inc 文件恶意软件分析

哈希类型	值	操作
MD5	b940dea1bd3482983f696150f9d42cfa
SHA1	0039011bde41e26ac1a478041d557d635829fd26
SHA256	79308cea626bf674afeb3423efd61ec2add6d6930afecf19a32fa0ea4fe3ee37
SHA512	8b7d200e4a0143b2d1ec0c1802f9503336349aef35cb95d3bb7cd5485ab42f009e06d3d71618008be7a136362a632d007ec12d8e283e0e97d44c9726b7c5bd31
ImpHash	ae0af1de2ea3c05eaa90aca3603fbbc9

基本信息

▼

映像基址	`0x10000000`
入口点	`0x100a5657`
编译时间	2020-05-29 09:22:38
校验和	0x0021e4e0 (实际: 0x00225250)
操作系统版本	6.0
PEiD 签名	`PE32 executable (DLL) (console) Intel 80386, for MS Windows`
PDB 路径	`E:\scljenkins-slv\workspace\Build-Job_ADLM_FY21-10.2-release@2\develop\global\src\build\win32\MSVS14\Release\Release\adlmint.pdb`
数字签名	The expected hash does not match the digest in SpcInfo
导入	27 库
导出	239 函数
资源	2 资源
节	10 节

版本信息

▼

CompanyName	Autodesk, Inc.
FileDescription	Autodesk component
FileVersion	23.0.21.0
LegalCopyright	Copyright 2020 Autodesk, Inc. All rights reserved.
ProductName	ADLM
ProductVersion	23.0.21.0
Translation	0x0409 0x04e4

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	892,397 bytes	892,416 bytes	6.51 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`78C194AA99D4EAEC15B2C1964B5E739A`
`.textidx`	`0x000db000`	934,920 bytes	935,424 bytes	6.08 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6D59AB4E6D04262E782CD57D5664337E`
`.rdata`	`0x001c0000`	172,888 bytes	173,056 bytes	5.33 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EB2641F7C8DBCF54142D5B3129D4E424`
`.data`	`0x001eb000`	144,288 bytes	113,664 bytes	5.31 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3118B1E6FE1FD22AC3F59AC384E9E390`
`.gfids`	`0x0020f000`	76 bytes	512 bytes	0.37 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C63BD63CB34C0A474538FE880DCA5E97`
`.tls`	`0x00210000`	9 bytes	512 bytes	0.02 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1F354D76203061BFDD5A53DAE48D5435`
`.fnp_dir`	`0x00211000`	100 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.fnp_mar`	`0x00212000`	1 bytes	512 bytes	0.02 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9475A59226943A3AD422E18169989F66`
`.rsrc`	`0x00213000`	1,200 bytes	1,536 bytes	3.54 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4DA49F6D37172E174CE969AA4BD4733D`
`.reloc`	`0x00214000`	75,260 bytes	75,264 bytes	6.66 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`F3B0F4A06BB7C497CE653C021587BB8A`

熵分析警报

2 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 2 (1,037 字节)

资源类型	数量	总大小	百分比
RT_VERSION	1	656 字节	63.3%
RT_MANIFEST	1	381 字节	36.7%

证书链分析

▼

证书 Information

产品	ADLM
描述	Autodesk component
文件版本	23.0.21.0
签名日期	09:59 AM 05/29/2020 (1922 天前)
验证状态	The digital signature of the object did not verify.
签名者	Autodesk, Inc.; Symantec Class 3 SHA256 Code Signing CA - G2; VeriSign Universal Root Certification Authority
副签名者	Sectigo RSA Time Stamping Signer #1; Sectigo RSA Time Stamping CA; Sectigo
版权	Copyright 2020 Autodesk, Inc. All rights reserved.

证书链摘要

Autodesk, Inc. #1 主要

有效期: 2020-03-24 00:00:00 → 2021-03-25 23:59:59

签名算法: sha256RSA

序列号: 31 A1 97 CB 84 A4 8C 48 EB CE 9D A6 E4 5A 17 F3

Symantec Class 3 SHA256 Code Signing CA - G2 #2 链

有效期: 2014-07-22 00:00:00 → 2024-07-21 23:59:59

签名算法: sha256RSA

序列号: 7C 1B 35 35 4A E7 DB 74 E7 41 5F 11 69 CA 6B A8

Sectigo RSA Time Stamping Signer #1 #3 链

有效期: 2019-05-02 00:00:00 → 2030-08-01 23:59:59

签名算法: sha384RSA

序列号: 3D 1A 35 72 30 15 82 63 30 D0 13 71 7E 82 41 08

Sectigo RSA Time Stamping CA #4 链

有效期: 2019-05-02 00:00:00 → 2038-01-18 23:59:59

签名算法: sha384RSA

序列号: 30 0F 6F AC DD 66 98 74 7C A9 46 36 A7 78 2D B9

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

The expected hash does not match the digest in SpcInfo

建议: 验证文件来源并确保它来自可信的发布者.

文件名	adlmint.dll
文件类型	PE32 executable (DLL) (console) Intel 80386, for MS Windows
扫描器版本	1.0.223.174
数据库版本	2025-08-30 19:00:45 UTC

Adlmint.dll (Autodesk component) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别

PE 分析