» GamePP.exe
Overview
Analysis
File Details

GamePP.exe

游戏加加

Game Plus Plus Technology Co. Ltd.

File name:

GamePP.exe

Publisher:

Game Plus Plus Technology Co. Ltd. (signed and verified)

Product:

游戏加加

Description:

GamePP主程序

Version:

2.40.83.929

MD5:

20792efe3b137b4fa0762e2e79d96d97

SHA-1:

61647053f6d4cea0407e7c6a5dd8b0d5b8ce48e7

SHA-256:

d5fdf9daea7d9e20ec508f5fcc731b75a1754073d3aec1865489537f919fe809

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

8/7/2025 7:43:12 PM UTC (today)

File size:

1.3 MB (1,324,376 bytes)

Product version:

2.40.83.929

Original file name:

GamePP.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\gamepp.exe

Digital Signature

Signed by:

Game Plus Plus Technology Co. Ltd.

Authority:

thawte, Inc.

Valid from:

5/9/2016 8:00:00 AM

Valid to:

7/9/2017 7:59:59 AM

Subject:

CN=Game Plus Plus Technology Co. Ltd., O=Game Plus Plus Technology Co. Ltd., L=ChengDu, S=SiChuan, C=CN

Issuer:

CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:

6FB26FB79B44134CD5886C18BC2E5F3C

File PE Metadata

Compilation timestamp:

9/29/2016 3:50:44 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:Atv1876jdhRwu9uwuGOTFw83WuJH4KSKAoFdwjOy/HHC9waZsAQLXjfKXx:4vhITFwyWuJH7SKeC9lZsAJXx

Entry address:

0x57782

Entry point:

E8, 83, 0F, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, 18, 78, 4E, 00, 5D, C3, 8B, FF, 55, 8B, EC, 56, 6A, 04, E8, FE, 8F, 00, 00, 59, FF, 35, 18, 78, 4E, 00, FF, 15, 2C, 53, 4B, 00, FF, 75, 08, 8B, F0, FF, 15, 28, 53, 4B, 00, 6A, 04, A3, 18, 78, 4E, 00, E8, E9, 8E, 00, 00, 59, 8B, C6, 5E, 5D, C3, 6A, 00, E8, C2, FF, FF, FF, 59, C3, FF, 35, 18, 78, 4E, 00, FF, 15, 2C, 53, 4B, 00, C3, 8B, FF, 55, 8B, EC, FF, 35, 18, 78, 4E, 00, FF, 15, 2C, 53, 4B, 00, 85, C0, 74, 0F, FF, 75, 08, FF, D0... 
[+]

Entropy:

6.3696

Code size:

719.5 KB (736,768 bytes)

Scan GamePP.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.