home

EasyAntiCheat.exe

EasyAntiCheat

EasyAntiCheat Oy

This is a setup program which is used to install the application. This file is installed with the program EasyAntiCheat eSports. The file has been seen being downloaded from download1513.mediafire.com and multiple other hosts.
Publisher:
EasyAntiCheat Ltd  (signed by EasyAntiCheat Oy)

Product:
EasyAntiCheat

Description:
EasyAntiCheat for Counter-Strike

Version:
4, 5, 4, 2

MD5:
52f06013b27c4d80d3f56205dec7e9b8

SHA-1:
4dd008236af1fe905e1bbf603066fa7ca05f19e9

SHA-256:
4a107a556735d7f6f42b0fd1bdc81ce094ca9ab7fe88989506bfad51b24363ac

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 5:19:32 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.4

File size:
1.3 MB (1,323,304 bytes)

Product version:
4, 5, 4, 2

Copyright:
Copyright © EasyAntiCheat Ltd 2015

Original file name:
EasyAntiCheat.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\easyanticheat.exe

Digital Signature
Signed by:
EasyAntiCheat Oy

Authority:
GlobalSign nv-sa

Valid from:
1/28/2015 10:03:36 AM

Valid to:
1/28/2018 10:03:36 AM

Subject:
CN=EasyAntiCheat Oy, O=EasyAntiCheat Oy, STREET=Keilaranta 16, L=Espoo, S=Uusimaa, C=FI, OID.1.3.6.1.4.1.311.60.2.1.3=FI, SERIALNUMBER=2585063-4, OID.2.5.4.15=Private Organization

Issuer:
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121A775882B273A40F9A6D4C8A76282E414

File PE Metadata
Compilation timestamp:
7/29/2015 3:30:58 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
24576:13DA2Ddlu15pEP43ErGlCJDOq48JjwQNGXgYf:tru15pEgUrGImOof

Entry address:
0x2403C

Entry point:
E8, 25, 98, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 60, 66, 44, 00, E8, DE, 43, 00, 00, E8, 39, 0F, 00, 00, 0F, B7, F0, 6A, 02, E8, B8, 97, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 19, 19, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
222.5 KB (227,840 bytes)

The file EasyAntiCheat.exe has been discovered within the following program.

EasyAntiCheat eSports  by EasyAntiCheat Ltd
www.easyanticheat.net
About 3% of users remove it
 
Powered by Should I Remove It?

The file EasyAntiCheat.exe has been seen being distributed by the following 16 URLs.

http://download1513.mediafire.com/1ba58mjgp7cg/.../EasyAntiCheat.exe

https://dc718.4shared.com/download/.../EasyAntiCheat.exe

http://download980.mediafire.com/t71mcyrac4bg/.../EasyAntiCheat.exe

https://mega.nz/temporary/.../5UUUxAKT

http://download1353.mediafire.com/stt5ikedkfxg/.../EasyAntiCheat.exe

http://download1513.mediafire.com/6ulil6rlrfcg/.../EasyAntiCheat.exe

http://download1761.mediafire.com/4lmd2etgrewg/.../EasyAntiCheat.exe

http://www75.zippyshare.com/d/H22LbM3s/.../EasyAntiCheat.exe

https://docs.google.com/uc?authuser=0&id=0B9PUK4PC6NpjRllXcnc3Tmoybnc&export=download

http://dc696.4shared.com/download/.../EasyAntiCheat.exe

http://download1761.mediafire.com/9fp5vairnsug/.../EasyAntiCheat.exe

http://download653.mediafire.com/1bivc4tivzlg/.../EasyAntiCheat.exe

http://www83.zippyshare.com/d/RfrXcEFr/.../EasyAntiCheat.exe

http://www.easyanticheat.net/static/.../EasyAntiCheat.exe

http://download1513.mediafire.com/tvcfxns0dk3g/.../EasyAntiCheat (3).exe

http://www.easyanticheat.net/EasyAntiCheat.exe

Scan EasyAntiCheat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.