home

gpprender.dat

游戏加加

Game Plus Plus Technology Co. Ltd.

Publisher:
成都游加佳科技有限公司  (signed by Game Plus Plus Technology Co. Ltd.)

Product:
游戏加加

Description:
游戏加加核心应用程序

Version:
2.38.80.825

MD5:
0f9c53c915a322f5313e80ac2f8704d0

SHA-1:
039a1406d1d13a9a0c2a442f0a1b19a9c78632d4

SHA-256:
ff5cb43a5259ef2867f7f33ffdc6375878d5a3a80d9b1f5109ab1dcca8c3db74

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/7/2025 7:37:32 PM UTC  (today)

File size:
1.2 MB (1,248,600 bytes)

Product version:
2.38.80.825

Copyright:
Copyright (C) 2015

Original file name:
GPPService.exe.exe

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\gpprender.dat

Digital Signature
Signed by:
Game Plus Plus Technology Co. Ltd.

Authority:
thawte, Inc.

Valid from:
5/9/2016 8:00:00 AM

Valid to:
7/9/2017 7:59:59 AM

Subject:
CN=Game Plus Plus Technology Co. Ltd., O=Game Plus Plus Technology Co. Ltd., L=ChengDu, S=SiChuan, C=CN

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6FB26FB79B44134CD5886C18BC2E5F3C

File PE Metadata
Compilation timestamp:
8/25/2016 5:43:37 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:pY4bwpYlHRhgWgfSYTFZOAYS88+2TQxshYW0oBnwt0YSnAVJJ/laXOhTsc85usRp:/TgW9KFZOAYSu2TQxsmObnwYOhh85usP

Entry address:
0xFFF16

Entry point:
E9, 48, 4F, 01, 00, 60, 8D, 64, 24, 2C, 0F, 84, 5B, CE, FF, FF, F5, F5, 01, F8, E9, 1E, 45, 01, 00, D4, 5C, 97, A3, 54, 27, 6B, 25, C4, 6A, AE, 33, AD, 91, 34, 81, 43, 6D, 01, 63, 2F, 32, 6E, C6, 71, C4, 7C, 33, 5B, D4, 76, BC, 40, A2, 63, F5, D9, 4A, 12, 60, B4, B5, 34, FF, 06, 5D, 89, 9A, C9, A3, 9D, A6, D2, 76, D9, AF, A4, 62, 85, 39, DF, 05, 66, 3A, 09, 5F, 7F, A6, 95, 0F, BE, C5, D2, 0D, C5, F0, 2C, A9, D6, AA, 90, D2, 0B, 17, 01, 5B, 37, EF, 2C, E4, 85, 04, D0, C9, C8, 8E, BA, 43, 00, 3B, D9, A3, A8...
 
[+]

Entropy:
6.9464

Packer / compiler:
Xtreme-Protector v1.05

Code size:
474 KB (485,376 bytes)

Scan gpprender.dat - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.