home

bedaisy.sys

Bastian Suter

Publisher:
Bastian Suter  (signed and verified)

MD5:
363fd77717be3a10f3a3227ba0010fa1

SHA-1:
178773e5a221fe3deebb634720a7eefc6faab3e5

SHA-256:
29b965299be1c9e863994e5f8980c234129cc783ff35055b39fcac06a5cae156

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
1/14/2025 11:28:52 AM UTC  (today)

Scan engine
Detection
Engine version

McAfee
Generic Obfuscated.c
5600.6809

File size:
201.2 KB (206,016 bytes)

File type:
Driver (Win64 SYS)

Common path:
C:\Program Files\common files\battleye\bedaisy.sys

Digital Signature
Signed by:
Bastian Suter

Authority:
DigiCert Inc

Valid from:
3/5/2014 3:00:00 AM

Valid to:
5/13/2015 3:00:00 PM

Subject:
CN=Bastian Suter, O=Bastian Suter, L=Tübingen, S=Baden-Württemberg, C=DE

Issuer:
CN=DigiCert High Assurance Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0F01D40307832B7F6747D7AB752213DC

File PE Metadata
Compilation timestamp:
2/18/2015 5:22:31 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
6144:q7jfPn9yDrqvfS/ybk9eP5kneQBmpjg02swSGBKMIRBv4asEM+d:mfVwrqvq/MkgP5keQ8g0EBp27tM+d

Entry address:
0x4B782

Entry point:
E9, 0C, 3C, FE, FF, D0, F5, DC, E9, D0, 74, ED, F4, C6, CB, E4, F5, E5, 42, 45, 08, 37, 1A, 85, 44, F7, E2, 11, 9C, A3, 62, E1, 1C, 57, 66, 0D, 84, A3, A6, 01, A8, AB, 6E, 99, 24, A3, 0E, 25, 34, 14, 0F, 78, E5, DA, 47, CE, 2E, 78, 8E, 44, 44, 7F, AC, 06, 6F, A8, D1, C9, DA, 92, 58, E9, 0A, 8E, FF, FF, FF, FF, A5, F6, 62, 59, 74, DE, A3, A8, 59, 56, 19, 1A, 28, F9, 15, F8, 78, 31, 09, 8E, FF, FF, FF, FF, C1, AA, 1C, 71, 23, FF, FF, FF, FF, 68, 4E, 1D, 0E, CF, D7, 22, 9E, 47, 65, 94, CB, 21, 82, 63, 9F, CE...
 
[+]

Entropy:
7.6749

Packer / compiler:
Xtreme-Protector v1.05

Code size:
7.5 KB (7,680 bytes)

Scan bedaisy.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.