Gridinsoft Logo

The AfCore.dll (AfCore DLL) File Analysis

Technical Analysis

File Name AfCore.dll
File Type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.225.174
Database Version 2025-09-22 00:00:24 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
2,566,144
File Size (bytes)
2025-09-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ac8f30722c20a56c9d085d006b2a70b7
SHA1
12fb1f8804c7adff9eb5b5ade51033d32db55900
SHA256
4bcc6fd855133990aeff8dc4960c12416ba38cc0f4b7096d5f7c386e6448f5a9
SHA512
96f06729913cf0eb9db4d1c00b198d48e5d65faa5bf45ad7f3193c9dd4a53086a8a9bc06d4b9b35bb4efec16348688bb8080f7a994cc025c5e360e8c62ac9046
ImpHash
5b3a2c588ea3be2c5fdfee791b7a6cc6

PE Analysis

Basic Information

Image Base 0x10000000
Entry Point 0x1044bd35
Compilation Time 2019-02-16 01:17:45
Checksum 0x002824cf (Actual: 0x002824cf)
OS Version 6.0
PEiD Signatures PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
PDB Path C:\ArcGIS\bin\AfCore.pdb
Digital Signature No valid SignedData structure was found.
Imports 30 libraries
Exports 2507 functions
Resources 62 Resources
Sections 10 Sections

Version Information

CompanyName Esri
FileDescription AfCore DLL
FileVersion 10.7.0.10450
InternalName AfCore
LegalCopyright Copyright ©1999-2019 Esri Inc. All Rights Reserved
LegalTrademarks
OriginalFilename AfCore.DLL
ProductName ArcGIS
ProductVersion 10.7.0.10450
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,218,923 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.textidx 0x0012b000 929,700 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0020e000 446,236 bytes 446,464 bytes 6.58 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 26FF23FB944EF49B8467E11A576EBB18
.data 0x0027b000 207,948 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.fnp_dir 0x002ae000 100 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.fnp_mar 0x002af000 1 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.vmp0 0x002b0000 1,001,184 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.vmp1 0x003a5000 2,096,808 bytes 2,097,152 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 60C985FE97BF60DEEC2A00E093362CE3
.reloc 0x005a5000 16,572 bytes 16,896 bytes 5.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7EAA5FB8D4B16ADC6881B3ABB6D78F14
.rsrc 0x005aa000 29,408 bytes 4,608 bytes 3.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68851A39A3DF9AEC184916B48938EF30
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 62 (26,213 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 16 4,800 bytes
18.3%
RT_BITMAP 2 508 bytes
1.9%
RT_DIALOG 2 284 bytes
1.1%
RT_STRING 25 19,134 bytes
73%
RT_GROUP_CURSOR 15 314 bytes
1.2%
RT_VERSION 1 792 bytes
3%
RT_MANIFEST 1 381 bytes
1.5%

Certificate Chain Analysis

Certificate Information
Product ArcGIS
Description AfCore DLL
File Version 10.7.0.10450
Original Name AfCore.DLL
Internal Name AfCore
Copyright Copyright ©1999-2019 Esri Inc. All Rights Reserved

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware