home

easyanticheat.sys

EasyAntiCheat Solutions

Publisher:
EasyAntiCheat Solutions  (signed and verified)

MD5:
3589489964b09a64dac6cd68c0930897

SHA-1:
d32d198949386fec1b54f7147cc48cf8f841dce8

SHA-256:
d4bdb146de972a084bb0e8c15b8eb3023b60976e7898ac17414a239a278a0868

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/27/2024 12:25:23 AM UTC  (today)

Scan engine
Detection
Engine version

Qihoo 360 Security
Malware.QVM00.Gen
1.0.0.1015

File size:
321.5 KB (329,208 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\easyanticheat.sys

Digital Signature
Signed by:
EasyAntiCheat Solutions

Authority:
GlobalSign nv-sa

Valid from:
5/21/2013 10:52:48 AM

Valid to:
5/22/2014 10:52:48 AM

Subject:
CN=EasyAntiCheat Solutions, O=EasyAntiCheat Solutions, L=Helsinki, C=FI

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B8FD88FEE2CA64F899D7BF868E3A149E

File PE Metadata
Compilation timestamp:
2/13/2014 4:48:45 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
6144:vGbHUPKLLQfRsk/wlA0w6ne5CK/pLrNdLhWEl0xoTKiEzlzmd2:+OwLI+k/wl3esspLrNdcS0xoTKiEw

Entry address:
0x46288

Entry point:
60, C7, 44, 24, 1C, FF, FA, B6, 4D, 54, 60, C7, 44, 24, 3C, 74, 48, DF, 3C, 68, 29, F5, 90, A9, FF, 34, 24, 88, 1C, 24, 8D, 64, 24, 44, E9, 50, 5D, 00, 00, 80, 7F, FF, 00, 50, E9, 2A, DB, FF, FF, FD, DE, C4, B0, 02, 8A, 44, F7, 7F, 49, DD, DA, EC, C5, EB, C9, 6C, DF, A0, CF, CF, FD, 22, BB, 75, 27, 69, 60, EF, C4, 26, 7E, 14, 17, AE, 13, A5, 6C, E0, 88, DA, C0, B3, AE, 93, 5A, 37, F5, C0, B4, AF, 2C, 9A, 7E, E3, AC, 81, AF, 71, 4D, 3F, 16, F2, 9C, C5, 7C, BA, FC, 4C, 7F, 53, 2B, DA, 75, E6, 88, DE, 2F, B0...
 
[+]

Code size:
17.4 KB (17,792 bytes)

Scan easyanticheat.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.