» easyanticheat.sys
Overview
Analysis
File Details

easyanticheat.sys

EasyAntiCheat Ltd

File name:

easyanticheat.sys

Publisher:

EasyAntiCheat Ltd (signed and verified)

MD5:

e8730c7b130360e80dd17e6bac512823

SHA-1:

e4f30393f6dc8ed5c116255d8418a829f56f06dc

SHA-256:

cda1c23fdf0e44bd4145ca392fbdf0b807dd6b1e867468a06f76ba241492f8e1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/16/2024 7:01:36 AM UTC (today)

File size:

506 KB (518,176 bytes)

File type:

Driver (Win64 SYS)

Common path:

C:\Windows\System32\easyanticheat.sys

Digital Signature

Signed by:

EasyAntiCheat Ltd

Authority:

GlobalSign nv-sa

Valid from:

4/22/2014 8:15:40 AM

Valid to:

4/17/2015 4:58:00 AM

Subject:

CN=EasyAntiCheat Ltd, O=EasyAntiCheat Ltd, L=Espoo, C=FI

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121FAEE84FA4ADDD304CD007E7E4DBF66C0

File PE Metadata

Compilation timestamp:

12/17/2014 11:27:04 AM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

12288:MEEBgsDDuIfIdd3ir8nDHuL6dmwIz/6Z/Npe+or9HtMM/:IBjO68nb/U/iVNOr9aY

Entry address:

0x7803D

Entry point:

E9, CC, B4, FF, FF, 0F, 84, A7, D9, FF, FF, 0F, 8C, CD, 8C, FF, FF, 0F, BE, F1, 48, 8B, 7D, 10, 66, BE, 05, 14, 66, 0F, BE, F1, E9, 58, B1, FF, FF, E9, A2, 7A, FF, FF, 5F, 87, 60, AA, 0B, 80, 00, 44, 55, 5B, 1A, 17, 52, 3E, AA, A3, C0, C7, 6D, F1, 6F, E2, EB, 82, EE, 61, 6B, D7, D9, F3, 52, CB, 52, DA, 91, CC, 41, 62, 95, 69, 62, 18, D3, 37, 44, 3A, E0, D7, EC, 3A, D7, 61, 92, 1D, 11, F4, E7, F0, A3, CF, D9, 06, 82, 83, AE, B4, 50, 38, C7, 85, 91, 90, F7, 29, A9, B6, B9, D8, 0A, B4, 2D, DA, 8C, 7E, 1A, 5E... 
[+]

Entropy:

7.0361

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

50 KB (51,200 bytes)

Scan easyanticheat.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.