home

easyanticheat.sys

EasyAntiCheat Solutions

Publisher:
EasyAntiCheat Solutions  (signed and verified)

MD5:
977d2037a44d1e1881b46b67694a62b0

SHA-1:
9b2f3fbbc888fe6525e56f8ea8b1286b23f10522

SHA-256:
b5b22c99ecb1596b3ff6b9227f76c19c34929dd1e3b44bcc76b2f3620bfa2feb

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/27/2024 7:23:29 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.151.104

IKARUS anti.virus
Trojan.Crypt
t3scan.1.6.1.0

File size:
173.6 KB (177,744 bytes)

File type:
Driver (Win32 SYS)

Common path:
C:\Windows\System32\easyanticheat.sys

Digital Signature
Signed by:
EasyAntiCheat Solutions

Authority:
GlobalSign nv-sa

Valid from:
5/21/2013 10:52:48 AM

Valid to:
5/22/2014 10:52:48 AM

Subject:
CN=EasyAntiCheat Solutions, O=EasyAntiCheat Solutions, L=Helsinki, C=FI

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121B8FD88FEE2CA64F899D7BF868E3A149E

File PE Metadata
Compilation timestamp:
6/15/2013 2:36:42 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
1536:JvJj9l18i17qJ8y8DtHcXDiG2Vmc1jb0YD+9jSOJ0rn3DDgwi/ULSiAejaB7Refz:JBK02HUtHXsQEYSlJ63DM/U/AjYk31Q

Entry address:
0x1FDE3

Entry point:
E8, 78, 60, 00, 00, 0F, BA, E0, 0B, 09, C0, E8, 10, 02, 00, 00, F5, 3C, 41, 60, 9C, 8D, 64, 24, 30, 0F, 82, 1E, 00, 00, 00, F6, C3, A9, F6, C7, 33, 3C, 5A, 60, 8D, 64, 24, 20, 0F, 87, 0B, 00, 00, 00, 10, CC, F6, DC, D2, C4, 0F, 9E, C4, 04, 20, D2, F4, 0F, 9E, C4, 80, EC, EC, 8A, 26, 68, 42, BD, 9A, E8, 80, FC, 41, C7, 04, 24, E8, E8, 20, 6F, 88, 04, 24, 8D, 64, 24, 04, 0F, 82, 62, 60, 00, 00, E9, 3C, 60, 00, 00, 60, 8D, 64, 24, 44, E8, DD, 49, 00, 00, E9, 64, 1D, 00, 00, 9C, 68, 1B, DC, 25, CB, 8D, 64, 24...
 
[+]

Code size:
7.9 KB (8,064 bytes)

Scan easyanticheat.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.