home

cheatguard.dll

Ivan Gritsenko

Publisher:
Ivan Gritsenko  (signed and verified)

MD5:
b1a0373983a32d74421e7b938347ea79

SHA-1:
50794d379165faf062288897437f2b5bebb51e04

SHA-256:
62c9dd804ef364f9091654a8ea1adbc00759ece8a887b07178eb921b97800864

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 6:29:55 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
23.00.65.16301

File size:
1.6 MB (1,685,944 bytes)

File type:
Dynamic link library (Win32 DLL)

Digital Signature
Signed by:
Ivan Gritsenko

Authority:
COMODO CA Limited

Valid from:
2/22/2016 3:00:00 AM

Valid to:
2/20/2017 2:59:59 AM

Subject:
CN=Ivan Gritsenko, O=Ivan Gritsenko, STREET=Pyatnitskoe shosse 6-4-185, L=Moscow, S=Moscow, PostalCode=125464, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EC9D0FD39D11E038DBA574BE1ECF5691

File PE Metadata
Compilation timestamp:
2/22/2016 11:13:20 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:ToVldmuD2m/Vv6xBmI3i1X9aP2tManb20LOoKzW+S+h5OQ6XHYS41gT3ifrNHqnO:4yg7ivw/Qd

Entry address:
0x1CA9CA

Entry point:
68, 83, E8, D0, 66, E8, 35, EA, FF, FF, 5E, B8, 10, 5C, C4, 72, 86, C7, 5B, 8D, 04, 39, 66, BF, 3A, 3E, 5F, E9, 4C, C9, 00, 00, 8B, 45, 0C, E9, DE, 28, 17, 00, 8B, 4D, FC, 66, 85, CA, 81, FD, E5, 31, 7D, 6B, 8D, 5B, FC, 81, FA, 00, 00, 00, 01, E9, A9, 91, 17, 00, 55, 53, 45, 52, 33, 32, 2E, 64, 6C, 6C, 00, 21, AB, EE, 0B, 9F, 80, 99, EA, 1B, AC, C1, 14, D9, 09, F2, 14, B9, F6, 50, 4D, 57, 1B, 05, 0E, EB, 72, 36, 55, EA, D7, DE, B7, A5, AB, A4, C3, 97, F3, 19, 50, 6F, AC, AE, 0F, 3E, 49, 48, 86, E5, E2, 8D...
 
[+]

Code size:
1.6 MB (1,679,872 bytes)

Scan cheatguard.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.