home

sgp_x64.sys

snail游戏安全组

苏州蜗牛数字科技股份有限公司

Publisher:
snail.cn  (signed by 苏州蜗牛数字科技股份有限公司)

Product:
snail游戏安全组

Description:
游戏安全

Version:
1.4.0.309

MD5:
2f900b070ab89b0036572d8ebf36c422

SHA-1:
36a078a91e6fc17b12c8d072215071d75d58d599

SHA-256:
d4996c5e514ba12dc438086001303389c8b652432aefd8d0c4071c97cfb903a4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 5:43:11 PM UTC  (today)

File size:
253.2 KB (259,320 bytes)

Product version:
1.4.0

Copyright:
版权所有(c) 2015, snail.cn

Original file name:
sdprotect.sys

File type:
Driver (Win64 SYS)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\游戏蜗牛\9yangsg\9ysg\bin64\sgp_x64.sys

Digital Signature
Signed by:
苏州蜗牛数字科技股份有限公司

Authority:
VeriSign, Inc.

Valid from:
10/29/2014 8:00:00 AM

Valid to:
11/28/2016 7:59:59 AM

Subject:
CN=苏州蜗牛数字科技股份有限公司, OU=技术中心, O=苏州蜗牛数字科技股份有限公司, L=苏州, S=江苏省, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5C8531D6CB8FCDB4CB26FA72214A2E58

File PE Metadata
Compilation timestamp:
12/24/2015 9:58:16 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
6144:hFpGpLDY7XTIQW3oBsAQrdl8mAfOm9wj8gdijCaMncdvlsrP5aeMhuVZXv:hbG9c7XlWlNEOmodotM2dmP5B3Jv

Entry address:
0x669A6

Entry point:
E9, E0, CE, FF, FF, 08, C0, E9, B5, CC, FF, FF, 7B, A6, 54, 8F, CD, 62, 49, 33, CC, 59, EA, B6, 98, 6D, 73, BE, 90, FD, D6, B1, FF, 5D, B0, D4, DC, 83, 3E, AD, 7B, 5F, 84, 15, 44, 58, 9B, 28, DD, 44, EB, 58, 6C, E9, 70, D5, 61, 17, 9F, EA, F4, E9, 04, 5F, C3, C4, BA, 57, 84, 60, 7E, 4B, 15, 08, A4, CB, 36, D5, AB, 86, B8, AD, 30, DB, A5, 50, 9E, 23, BF, 60, 4E, 8B, EB, FE, 5F, A8, 45, 55, 73, E9, 02, 61, 86, 56, 3B, 07, FE, FF, FF, 04, C9, C5, F0, 1C, B1, 8E, B6, C7, 38, D9, CE, 3F, 60, 55, DA, 37, 53, 47...
 
[+]

Entropy:
7.7901

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
11.5 KB (11,776 bytes)

Scan sgp_x64.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.