» easyanticheat.sys
Overview
Analysis
File Details

easyanticheat.sys

EasyAntiCheat Solutions

File name:

easyanticheat.sys

Publisher:

EasyAntiCheat Solutions (signed and verified)

MD5:

b3a56b6d32415ec29a63e6c70c29cf7d

SHA-1:

dfa970c638e2c20e79138aa54982857da77e60de

SHA-256:

d68ad7024cf2f742f8f504e868d18d2dd72674eb029d42ada53d1c737e19b17e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 4:58:12 AM UTC (today)

File size:

224.8 KB (230,232 bytes)

File type:

Driver (Win64 SYS)

Common path:

C:\Windows\System32\easyanticheat.sys

Digital Signature

Signed by:

EasyAntiCheat Solutions

Authority:

GlobalSign nv-sa

Valid from:

5/21/2013 3:52:48 PM

Valid to:

5/22/2014 3:52:48 PM

Subject:

CN=EasyAntiCheat Solutions, O=EasyAntiCheat Solutions, L=Helsinki, C=FI

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121B8FD88FEE2CA64F899D7BF868E3A149E

File PE Metadata

Compilation timestamp:

2/9/2014 1:21:13 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

6144:aD9UqE9jgzd98/x0NCLV08aE3mXoGA3XRz:aRzcj898+MS8tm7AR

Entry address:

0x9041D

Entry point:

E9, 5F, 38, 00, 00, 66, 0F, CB, 5B, E9, 11, 1D, 00, 00, 0F, 85, DA, FD, FF, FF, 66, 31, E1, D2, D1, 89, F9, F9, 66, 31, FE, 66, 0F, B6, F1, 0F, A4, CE, 19, 29, D9, 48, F7, DE, 66, 0F, AC, DE, 01, 48, 89, E6, F5, 66, 81, FF, AA, 6B, 66, 0F, A3, E8, 48, 83, EF, 08, F8, F9, F9, 66, 0F, BA, E0, 04, FF, 37, E9, 4E, 7B, FD, FF, F6, C6, 71, 28, D8, E9, 2D, 39, 00, 00, E9, AC, 43, 00, 00, E9, 2B, 36, 00, 00, 0F, 88, 21, 79, FD, FF, 68, 94, 91, F0, 3C, E9, FD, F9, FF, FF, 00, 00, 4B, 65, 57, 61, 69, 74, 46, 6F, 72... 
[+]

Packer / compiler:

Xtreme-Protector v1.05

Code size:

20.5 KB (20,992 bytes)

Scan easyanticheat.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.