» 0020eb85-f95b-1608-5c91-605df1b21d13
Overview
Analysis
File Details

0020eb85-f95b-1608-5c91-605df1b21d13

EasyAntiCheat Oy

File name:

Publisher:

EasyAntiCheat Oy (signed and verified)

MD5:

6730a3b967f12c48eae5ac87f0f3f338

SHA-1:

4e4cd9ba6dab553b1a826f0c7f4885fface9e40b

SHA-256:

653468e3a39b7337f254a19d1732965439eaddcd1ad82645dae726fe52b9370f

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/14/2024 9:33:35 PM UTC (today)

File size:

1.1 MB (1,135,144 bytes)

Common path:

C:\users\{user}\appdata\local\temp\0020eb85-f95b-1608-5c91-605df1b21d13

Digital Signature

Signed by:

EasyAntiCheat Oy

Authority:

GlobalSign nv-sa

Valid from:

1/28/2015 1:03:36 PM

Valid to:

1/28/2018 1:03:36 PM

Subject:

CN=EasyAntiCheat Oy, O=EasyAntiCheat Oy, STREET=Keilaranta 16, L=Espoo, S=Uusimaa, C=FI, OID.1.3.6.1.4.1.311.60.2.1.3=FI, SERIALNUMBER=2585063-4, OID.2.5.4.15=Private Organization

Issuer:

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121A775882B273A40F9A6D4C8A76282E414

File PE Metadata

Compilation timestamp:

3/16/2017 1:40:06 PM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

Entry address:

0x221F64

Entry point:

E9, 70, 79, FF, FF, E9, 24, 87, FF, FF, E9, 01, 5B, FF, FF, 0F, 85, 9F, 0E, 00, 00, 66, 0F, A3, EB, 66, 0F, A4, D7, 0F, C1, E7, 1D, 0F, BC, FC, 8B, 7A, 24, F9, 48, 01, C7, F9, F9, 0F, B7, 0C, 4F, 0F, BE, FA, 0F, AD, FF, 8B, 7A, 1C, F5, F9, 48, 01, C7, 0F, BA, E0, 0B, E9, D9, FD, FF, FF, 48, 89, FA, 66, 0F, C8, 66, 0D, 9D, 55, 30, F8, 48, 0F, BD, C1, 48, 2B, 55, 18, 66, 0F, B3, E0, 48, 25, 39, 6E, 5B, 7A, 83, E2, 03, 0F, BE, C3, 0F, BD, C0, C1, D0, 06, 48, F7, D8, 89, C8, F6, C6, 7F, F5, 66, F7, C7, 88, AA... 
[+]

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

73.5 KB (75,264 bytes)

Scan 0020eb85-f95b-1608-5c91-605df1b21d13 - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.