home

gamecore.exe

酷狗游戏盒

Guangzhou KuGou Computer Technology Co., Ltd.

Publisher:
酷狗计算机科技有限公司  (signed by Guangzhou KuGou Computer Technology Co., Ltd.)

Product:
酷狗游戏盒

Description:
酷狗游戏盒GameCore

Version:
2,0,1,3315

MD5:
68f14f1f9f29cb855502e197769518c5

SHA-1:
3108e2ad9a7c15ef050515ac6191c4bcc81cd08c

SHA-256:
fd431b0c09b9ba0e5ac2a402799624495026b4bc87d799ced91bb50551df904e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:48:43 AM UTC  (today)

File size:
880.8 KB (901,984 bytes)

Product version:
2,0,1,3315

Copyright:
Copyright 酷狗计算机科技有限公司(C) 2013

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\roaming\gouwo\1006\gamecore.exe

Digital Signature
Signed by:
Guangzhou KuGou Computer Technology Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
1/11/2012 8:00:00 AM

Valid to:
1/11/2015 7:59:59 AM

Subject:
CN="Guangzhou KuGou Computer Technology Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Guangzhou KuGou Computer Technology Co., Ltd.", L=Guangzhou, S=Guangdong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
401B0F1E61F50CD4E402604CA1ABDDB4

File PE Metadata
Compilation timestamp:
9/18/2014 4:15:17 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:en5waJa1yeG5CzK0y5rNE9Z9wS0bInefK09Cs7RvqMRyG:e5w71ZGszK0qNoZ9wS0buIK09NRvqMR5

Entry address:
0x69026

Entry point:
E8, 2E, 9F, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, FF, 75, 0C, 6A, 00, FF, 75, 08, 68, BC, FD, 46, 00, E8, 84, 02, 00, 00, 83, C4, 10, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 20, 53, 57, 33, DB, 6A, 07, 33, C0, 59, 8D, 7D, E4, 89, 5D, E0, F3, AB, 39, 5D, 14, 75, 18, E8, 8D, 15, 00, 00, C7, 00, 16, 00, 00, 00, E8, 19, 2E, 00, 00, 83, C8, FF, E9, BC, 00, 00, 00, 8B, 7D, 10, 56, 8B, 75, 0C, 3B, FB, 74, 1C, 3B, F3, 75, 18, E8, 66, 15, 00, 00, C7, 00, 16, 00, 00, 00, E8, F2, 2D, 00, 00, 83, C8, FF, E9, 94...
 
[+]

Entropy:
6.5775

Code size:
582 KB (595,968 bytes)

Scan gamecore.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.