Information about GF.dll
GF.dll
File Details
| Product Name: | 腾讯QQ |
| Company Name: | Tencent |
| MD5: | c495dd5b228b8b14c7559115600d3e17 |
| Size: | 2 MB |
| First Published: | 2017-05-21 06:06:26 (6 years ago) |
| Latest Published: | 2021-06-11 20:36:49 (2 years ago) |
| Status: | Undefined (on last analysis) | |
| Analysis Date: | 2021-06-11 20:36:49 (2 years ago) |
Overview
| Signed By: | Tencent Technology(Shenzhen) Company Limited |
| Status: | Valid |
Common Places:
| %appdata%\tencent\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\ndyarifnwlztuddumcbcnpheohluihfj\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\ruyltefsntyxenuahnabkuddahqeinvb\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\kbtjsdkqayepvmsanirjspztlsbfvdce\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\rnqankqiyrhagyzmkrumtczgsmdflpzp\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\kvutawbnxcuqqseowenxafzfhzvlcmut\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\akealobdapzwbzehzqxjiscimsetwztq\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\vnqvvtneuyufkwbappvqjcdqxnuxjkck\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\azarobodqjgqgqgxegwozusdyrmkqeir\androidserver\1.0.0.492 |
| %sysdrive%\adwcleaner\quarantine\files\hpgcqxhvlzpbgmzlqcxlpncdwehgypfp\androidserver\1.0.0.492 |
File Names:
| GF.dll |
| GF.dll.vir |
| GF (1).dll |
Geography:
| 33.2% | ||
| 19.2% | ||
| 10.3% | ||
| 7.4% | ||
| 4.6% | ||
| 4.3% | ||
| 2.8% | ||
| 2.3% | ||
| 1.8% | ||
| 1.5% | ||
| 1.0% | ||
| 0.7% | ||
| 0.7% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.6% | ||
| 0.5% | ||
| 0.5% | ||
| 0.5% | ||
| 0.4% | ||
| 0.4% | ||
| 0.4% | ||
| 0.4% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.3% | ||
| 0.2% | ||
| 0.2% | ||
| 0.2% | ||
| 0.2% | ||
| 0.2% | ||
| 0.2% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% | ||
| 0.1% |
OS Version:
| Windows 10 | 50.0% | |
| Windows 7 | 40.2% | |
| Windows 8.1 | 6.7% | |
| Windows 8 | 2.2% | |
| Windows XP | 0.7% | |
| Windows Vista | 0.1% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x30800000 |
| Entry Address: | 0x001474b2 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 1441280 | 1842411dc4192ff99a216cd35c029597 |
| .rdata | 526848 | 8ee9aabdcb8c30ced95822f3553c0171 |
| .data | 65536 | 8d209daa91944f272d89dd60217d2f60 |
| .rsrc | 30720 | 561f3c72854bb40c8abfbdf93b6b79f4 |
| .reloc | 261632 | a41b293377ec8e3753625c22aaa75cba |
More information:
