home

gwCore.dll

IGW

Shanda Computer (Shanghai) Co., Ltd.

Publisher:
SNDA  (signed by Shanda Computer (Shanghai) Co., Ltd.)

Product:
IGW

Description:
GameWidget Core Module

Version:
0.9.1.252

MD5:
4ab169a40ecb2d9202a1bf4a92fa4d0a

SHA-1:
f4c50801501d8516c921d936a323e2268c89d3a3

SHA-256:
c9931e5d97ac3d31ff715192bd8299470ec1ce8e5a48050f652d1c633b492de0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/13/2025 7:40:38 PM UTC  (today)

File size:
1.7 MB (1,735,016 bytes)

Product version:
1.0.0.0

Copyright:
(C) SNDA 2009

Original file name:
gwCore.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\盛大游戏\传奇世界\data\gwcore.dll

Digital Signature
Signed by:
Shanda Computer (Shanghai) Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
7/13/2009 8:00:00 AM

Valid to:
7/14/2010 7:59:59 AM

Subject:
CN="Shanda Computer (Shanghai) Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Shanda Computer (Shanghai) Co., Ltd.", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
41DD9EE091EDB18FB5F2666307492AB4

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:Pxv0q+bgECniT90OPtE8utdD18vNlhq12j:Pxv0qSgMtxunD18vRN

Entry address:
0x490AED

Entry point:
68, 12, 80, 76, 2B, E8, 06, DF, 06, 00, E8, 95, A5, ED, FF, 68, 11, ED, 26, 6B, E8, 2A, D9, 06, 00, 87, C4, 5B, DA, 8E, 39, D3, 6B, E9, 22, CE, CE, 88, 19, AE, 2B, E4, 75, 08, 22, 33, 37, F0, 99, 23, 04, 15, AD, B8, C9, 89, 90, 50, 49, 02, 3C, BC, FD, 17, 42, 91, 6C, 0E, 22, 36, 40, D6, 79, A0, B0, A4, E1, 62, F5, B5, 5B, 9B, 92, 6C, 84, 43, F6, 72, 0E, AA, D5, D3, CD, 68, FB, BA, BC, 4A, 3F, 3A, 57, 4A, 0A, E9, 32, C6, 5D, 85, 64, D3, 2D, 32, 6A, 75, 8D, 85, 21, 2A, AA, D5, 7F, FF, 2A, 42, EC, 97, A2, B3...
 
[+]

Entropy:
7.9099  (probably packed)

Code size:
5 MB (5,239,296 bytes)

Scan gwCore.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.