home

cf_sgi_res.dll

MD5:
aadd09306fa220a2a0a70a39da6ddbac

SHA-1:
c22c8b20bb8935861a215f2e0fc819eb93a01bbb

SHA-256:
a7e28d3e6a4cacee789d159033703d5abcd6ab812d213d2a3a9139e15313a091

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 4:00:56 AM UTC  (today)

File size:
2.8 MB (2,986,496 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\cf_sgi_res.dll

File PE Metadata
Compilation timestamp:
5/10/2016 8:57:29 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:vfVv6JqAhjHDVKaMZAwd7WojlrhpB0jY+6lGvYarhtoYP+L+QB:v56JqAhEz1ZWoBruc+6lGvYarg+JQB

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

The file cf_sgi_res.dll has been seen being distributed by the following 47 URLs.

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161218170407

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20170106115914

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160522120053

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161020231729

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161118203625

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160916182146

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161227120441

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160702101825

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161012132430

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160517081857

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161211162722

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160725175742

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161012215828

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160924171704

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20161019090657

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160820014211

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160725035232

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160827153506

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160604094753

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160520072947

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160609165755

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160617070050

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160516230437

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160612033419

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160516163506

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160521190206

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160605163757

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160523080420

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160605075026

http://cf.cdn.patchgamerage.com/livepatch/launcher/.../CF_SGI_RES.dll?20160603163228

Latest 30 of 47 download URLs

Scan cf_sgi_res.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.