home

eseadriver2.sys

E-Sports Entertainment LLC

It runs as a Windows kernel mode device driver named “ESEADriver2”.
Publisher:
E-Sports Entertainment LLC  (signed and verified)

MD5:
8e8c8d6dcc81775c7dd964bffd576968

SHA-1:
962d2ff5c37a106d964459e3f788166449ef7bc3

SHA-256:
c43cf111b38543a2c0df2e6ef52d4af16f2ae20686982a989b64da2cb6be0195

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 4:18:21 AM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/SuspPack.AJ.gen
4.6.5.141

File size:
60.3 KB (61,704 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\users\{user}\appdata\local\temp\eseadriver2.sys

Digital Signature
Signed by:
E-Sports Entertainment LLC

Authority:
DigiCert Inc

Valid from:
8/22/2012 1:00:00 AM

Valid to:
8/27/2014 1:00:00 PM

Subject:
CN=E-Sports Entertainment LLC, O=E-Sports Entertainment LLC, L=Commack, S=New York, C=US

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0BD4A8D16338C26075BC4B4309FE56CA

File PE Metadata
Compilation timestamp:
9/4/2012 5:25:59 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
1536:gLfFEsocGUIVQ6JwqEl6hu4BsT4DRVwItiOKVQLWZ1TyBnFv:ghEBcGUIeUQ4BDttijVqW1Ty7v

Entry address:
0x503E

Entry point:
8B, FF, 55, 8B, EC, E8, BD, FF, FF, FF, 5D, E9, CC, C4, FF, FF, CC, CC, 78, 50, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 16, 53, 00, 00, 00, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, EC, 50, 00, 00, 02, 51, 00, 00, 10, 51, 00, 00, 2C, 51, 00, 00, 3C, 51, 00, 00, 5C, 51, 00, 00, 70, 51, 00, 00, 8E, 51, 00, 00, 98, 51, 00, 00, AA, 51, 00, 00, C2, 51, 00, 00, DA, 51, 00, 00, EE, 51, 00, 00, 06, 52, 00, 00, 1E, 52, 00, 00, 30, 52, 00, 00, 3A, 52, 00, 00, 54, 52...
 
[+]

Code size:
5.5 KB (5,632 bytes)

Driver
Display name:
ESEADriver2

Type:
Kernel device driver (KernelDriver)


Scan eseadriver2.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.