Information about npQQPhotoDrawEx.dll

npQQPhotoDrawEx.dll

File Details

Product Name:

npQQPhotoDrawEx
MD5: c1e3c6799cd98a15b49d10afe5787313
Size: 215 KB
First Published: 2017-05-21 06:06:43 (8 years ago)
Latest Published: 2022-10-01 23:59:47 (3 years ago)
Status: Undefined (on last analysis)
Analysis Date: 2022-10-01 23:59:47 (3 years ago)

Overview

Signed By: Tencent Technology(Shenzhen) Company Limited
Status: Valid

Common Places:

%programfiles%\tencent\qzone
%sysdrive%\adwcleaner\quarantine\files\pljzezwicdpfbcsjtxhuqblskmlbibkn\qzone
%sysdrive%\adwcleaner\quarantine\files\kuntaycjssylqyciezvsdgknieonkcnj\qzone
%sysdrive%\adwcleaner\quarantine\files\mcumcmfwmsfqnecfvftoqpaginepxlrm\qzone
%programfiles%\tencent\qzone\ver_247.312
%sysdrive%\adwcleaner\quarantine\zdgc81tbdk\qzone
%sysdrive%\adwcleaner\quarantine\zdgc81tbdk\qzone\ver_247.312
%sysdrive%\adwcleaner\quarantine\rqf69azbla\qzone
%sysdrive%\adwcleaner\quarantine\files\rrolfecnphkhnyozwdhvfylucnajiqht\qzone
%sysdrive%\$sysreset\oldos\program files (x86)\tencent\qzone

Geography:

35.1%
32.9%
13.5%
4.1%
1.9%
1.8%
1.4%
1.2%
0.9%
0.9%
0.8%
0.7%
0.7%
0.7%
0.4%
0.4%
0.3%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 71.5%
Windows 7 21.2%
Windows 8.1 3.2%
Windows Server 2012 R2 1.3%
Windows Server 2008 R2 1.1%
Windows 8 1.0%
Windows Server 2003 0.4%
Windows XP 0.2%
Windows Server 2012 0.1%
Windows Server 2016 0.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x000159e6

PE Sections:

Name Size of data MD5
.text 131072 284abb23cca5477bca9951e9f68a0218
.rdata 45056 c9b173741cf65abd334e1c40edb15cb1
.data 12288 0070deb7ce2e38d6327fcc83b17dacbf
.rsrc 4096 b34d7be834051fe62ec57437a49f343d
.reloc 16384 0f379d48a3f0ed6bf9b47f93cf8f1850

More information:

Search on Virustotal
copyright for information about npQQPhotoDrawEx.dll