home

core64.dll

CORE

Game Plus Plus Technology Co. Ltd.

Publisher:
成都游加佳科技有限公司  (signed by Game Plus Plus Technology Co. Ltd.)

Product:
CORE

Description:
游戏加加 核心库

Version:
2.15.31.825

MD5:
858da6c760f45f7eb9d61dcced1862b2

SHA-1:
dfa95b764310a05450e49e3d0612b36f9b9d25e1

SHA-256:
46718923c1750c3a4db7ef303ff41293072636d7bb10cb8d79424db6fd3fa9db

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/7/2025 7:37:32 PM UTC  (today)

File size:
935.3 KB (957,784 bytes)

Product version:
2.15.31.825

Copyright:
Copyright (C) 2015

Original file name:
CORE.dll

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\core64.dll

Digital Signature
Signed by:
Game Plus Plus Technology Co. Ltd.

Authority:
thawte, Inc.

Valid from:
5/9/2016 8:00:00 AM

Valid to:
7/9/2017 7:59:59 AM

Subject:
CN=Game Plus Plus Technology Co. Ltd., O=Game Plus Plus Technology Co. Ltd., L=ChengDu, S=SiChuan, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6FB26FB79B44134CD5886C18BC2E5F3C

File PE Metadata
Compilation timestamp:
8/25/2016 4:40:41 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
12288:V4J5dINIDfydujBAP/oENFm73guXw2zTJSvzJe6xiAUesgGLR5l4AG:V2d1DfFjBAnr473g85HJSLJHxiA/pIc

Entry address:
0x96DC0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, B7, 9F, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 4D, 74, 04, 00, FF, 15, 57, 46, 01, 00, 48, 8B, 05, 38, 75, 04, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, EB, E4, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24...
 
[+]

Entropy:
6.2543

Code size:
680 KB (696,320 bytes)

Scan core64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.