libcef.dll file report

MD5 59a2872c74ff86f2fc8dee62c1b37cc5
Latest seen 2023-02-03 23:44:15 (3 years ago)
First seen 2023-02-03 23:44:15 (3 years ago)
Size 165 MB
Signed by Lenovo

This report summarizes the file identity, detection status, publisher metadata, observed locations, and technical indicators for libcef.dll. The latest available status is Clean.

libcef.dll is a Windows file recorded in the ThreatInfo database. It is associated with Chromium Embedded Framework (CEF) Dynamic Link Library. The current detection status is Clean, based on the latest analysis from 2023-02-03 23:44:15 (3 years ago).

This record is currently marked as clean, but file reputation can depend on the exact path, hash, and source. Compare the MD5 and publisher data below with the file on your system.

Product Name: Chromium Embedded Framework (CEF) Dynamic Link Library
MD5: 59a2872c74ff86f2fc8dee62c1b37cc5
Size: 165 MB
First Published: 2023-02-03 23:44:15 (3 years ago)
Latest Published: 2023-02-03 23:44:15 (3 years ago)
Status: Clean (on last analysis)
Analysis Date: 2023-02-03 23:44:15 (3 years ago)
Signed By: Lenovo
Status: Trusted Publisher

ThreatInfo marks this publisher as trusted for this record, but the file hash and source should still match the expected software distribution.

%programfiles%\lenovo

ThreatInfo has observed libcef.dll in the locations listed above. Files found in temporary folders, user profile folders, startup locations, or unusual application directories should be reviewed more carefully than files installed under a known program directory.

100.0%

The strongest geographic signal for this file is Mexico with 100.0% of observed hits. Geographic distribution can help identify targeted campaigns, regional software bundles, or where a file is most commonly reported.

Windows 10 100.0%

The most common operating system signal for libcef.dll is Windows 10 with 100.0% of observed hits. If your system differs from the common profile, check whether the file was introduced by a specific installer, archive, or removable device.

libcef.dll is identified as pe for 64 systems. The subsystem is Windows CUI. PE header values are useful for triage, especially when they do not match the expected publisher, product, or release timeline.

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000180000000
Entry Address: 0x088d0a40

PE Sections:

Name Size of data MD5
.text 143852032 3dced00717e3b7a0a39c19b77ad1428d
.rdata 22456320 86a7a3f53dfc4230885ae56aff0de451
.data 607232 c41146447c695a8ec09553b0d0f1947e
.pdata 5385728 78c4c5d6e89d22d6cb455a6e09c392d4
.00cfg 512 452a71ecb0d17c29d51ec94680dc8d21
.gxfg 17408 e43686fd26697eb967c6da1d6ab49815
.retplne 512 66a4217637534675afda65f1b85c711e
.rodata 2560 23158f78ddcc104ef61c291491f1c360
.tls 1024 df2af26e6654c125803e7cbb69be8e07
.voltbl 512 22569f571692d56d9b5ac5b8dea43eef
CPADinfo 512 60d3ea61d541c9be2e845d2787fb9574
_RDATA 512 b8659655446ffa2031c5754cde8ee56d
malloc_h 512 348ce6fa23db2144fe4408b178565968
.rsrc 144896 ec08ae96e80d41e152aa26f0d6107f11
.reloc 1445376 f79c4fb31fce35064f10f21ed7523118

PE section names and hashes can reveal packing, injected resources, or unusual build artifacts. Sections with uncommon names, very large raw data, or hashes that differ from a trusted copy deserve additional review.

More information: