Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Garena Online Pte Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
ggspawn.dll
By Garena Online Pte Ltd (Signed)
| MD5: | d9e78f200dd6bee898f075c4596c6e14 |
| SHA1: | 8a940845498019ada0d86e479ea86174b7a30674 |
| SHA256: | e747ba6c53e720768df4bf4ad048e8400e73eb2b3c7a93b8688b685e9283e096 |
Overview
ggspawn.dll executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). This is typically installed with the program Garena Plus published by Garena Online Pte Ltd.. The file is digitally signed by Garena Online Pte Ltd which was issued by the VeriSign certificate authority (CA).
Details
| File name: | ggspawn.dll |
| Typical file path: | C:\Program Files\garena plus\ggspawn.dll |
| Size: | 186.8 KB (191,280 bytes) |
| Certificate |
| Issued to: | Garena Online Pte Ltd |
| Authority (CA): | VeriSign |
| Expiration date: | Friday, March 11, 2557 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
The Garena Plus application developed for various games distributed by the comapny allows gamers to develop buddy lists, chat with friends online and check on game progress and achievements. The Garena Plus game platform can be downloaded for free and it has an interface similar to instant messaging platforms. Gamers are also able to form groups or clans, and chat with multiple gamers simultaneously through public or private channels t...
Behaviors
Scheduled tasks
- The task 'gg_uac_daemon_Winston' runs on logon in the path '\gg_uac_daemon_Winston'
- The task 'gg_uac_daemon_MingTat' runs on logon in the path '\gg_uac_daemon_MingTat'
- The task 'gg_uac_daemon_Administrator' runs on logon in the path '\gg_uac_daemon_Administrator'
- The job 'gg_uac_daemon_Dave' runs on logon in the path '\gg_uac_daemon_Dave'
- Entry path '\gg_uac_daemon_mark leo go'
- Entry path '\gg_uac_daemon_Valued User'
- Entry path '\gg_uac_daemon_Woody'
- Entry path '\gg_uac_daemon_Scal2LeTz'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\gg_uac_daemon_Winston'
- Login entry path '\gg_uac_daemon_mark leo go'
- Login entry path '\gg_uac_daemon_Valued User'
- Login entry path '\gg_uac_daemon_Scal2LeTz'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00004640% | |
| Kernel CPU: | 0.00003093% | |
| User CPU: | 0.00001547% | |
| Kernel CPU time: | 62 ms/min | |
| Context switches: | 65/sec | |
| Memory |
| Private memory: | 3.68 MB | |
| Private (maximum): | 6.11 MB | |
| Private (minimum): | 184 KB | |
| Non-paged memory: | 3.68 MB | |
| Virtual memory: | 76.13 MB | |
| Virtual memory (peak): | 77.76 MB | |
| Working set: | 536 KB | |
| Working set (peak): | 6.47 MB | |
| Resource allocations |
| Threads: | 3 | |
| Handles: | 117 | |
| GUI GDI count: | 15 | |
| GUI GDI peak: | 16 | |
| GUI USER count: | 5 | |
| GUI USER peak: | 5 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command line: | C:\windows\syswow64\rundll32.exe "C:\Program Files\garena plus\ggspawn.dll",rundll_entry -p 0 |
| Owner: | User |
| Parent process: | services.exe (by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
31.25% |
|
| Microsoft Windows XP |
20.83% |
|
| Windows 8 |
12.50% |
|
| Windows 7 Home Premium |
10.42% |
|
| Windows 8 Single Language |
8.33% |
|
| Windows 8 Enterprise |
6.25% |
|
| Windows 8 Pro |
6.25% |
|
| Windows Vista Home Premium |
2.08% |
|
| Windows 8.1 Single Language |
2.08% |
|
Distribution by country
Taiwan installs about 29.17% of ggspawn.dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
28.00% |
|
| GIGABYTE |
20.00% |
|
| Acer |
16.00% |
|
| Hewlett-Packard |
16.00% |
|
| Toshiba |
12.00% |
|
| Lenovo |
4.00% |
|
| American Megatrends |
4.00% |
|
