» sgp_x86.sys
Overview
Analysis
File Details

sgp_x86.sys

snail游戏安全组

苏州蜗牛数字科技股份有限公司

File name:

sgp_x86.sys

Publisher:

snail.cn (signed by 苏州蜗牛数字科技股份有限公司)

Product:

snail游戏安全组

Description:

游戏安全

Version:

1.4.0.309

MD5:

bd646732a81f8c023f508de6c528f21b

SHA-1:

2b234b0a15e915319df933c11b434bc1baa314d0

SHA-256:

3525b20dc36d44dab2646d46d5d238f635d9d14a0869519f5ef9e448d932066e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/17/2024 5:22:28 PM UTC (today)

File size:

208.6 KB (213,624 bytes)

Product version:

1.4.0

Original file name:

sdprotect.sys

File type:

Driver (Win32 SYS)

Language:

Chinese (Simplified, PRC)

Common path:

C:\Program Files\游戏蜗牛\9yangsg\9ysg\bin64\sgp_x86.sys

Digital Signature

Signed by:

苏州蜗牛数字科技股份有限公司

Authority:

VeriSign, Inc.

Valid from:

10/29/2014 8:00:00 AM

Valid to:

11/28/2016 7:59:59 AM

Subject:

CN=苏州蜗牛数字科技股份有限公司, OU=技术中心, O=苏州蜗牛数字科技股份有限公司, L=苏州, S=江苏省, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C8531D6CB8FCDB4CB26FA72214A2E58

File PE Metadata

Compilation timestamp:

12/24/2015 9:58:14 AM

OS version:

6.1

OS bitness:

Win32

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

6144:V9MwtJhhyJWoPd+U1JyWQtOs/I4uo/+A3nmD:bMwtLDoAU10pM2d5HmD

Entry address:

0x2DCA5

Entry point:

9C, E9, BD, C1, FF, FF, E8, 84, 08, 00, 00, 88, 3C, 24, 8D, 64, 24, 20, 0F, 87, 43, EE, FF, FF, D2, FC, E9, 37, EE, FF, FF, 9C, 8D, BD, 13, 14, AE, D2, 89, D7, 8D, 64, 24, 04, 80, D5, 31, 0F, C0, C5, 89, F9, 0F, 9C, C0, 0F, BA, E0, 1D, E9, 23, A5, FF, FF, 46, 7B, B1, FC, 69, 1A, 5F, E9, E1, 78, D9, 0F, 36, 2C, 22, B9, 1A, 0D, 72, 67, 4E, C1, AE, E1, 0A, 7F, 5B, 4F, 27, DC, 9B, 0F, DC, 92, B4, A8, 0B, FB, A3, 46, B7, 61, C6, 3C, 56, 0A, 92, 46, E5, 31, 15, 0E, D5, 7E, 33, 31, 26, 0A, E9, EA, 7E, 34, 02, 76... 
[+]

Entropy:

7.7503 (probably packed)

Code size:

10.1 KB (10,368 bytes)

Scan sgp_x86.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.