» easyanticheat.sys
Overview
Analysis
File Details

easyanticheat.sys

EasyAntiCheat Solutions

File name:

easyanticheat.sys

Publisher:

EasyAntiCheat Solutions (signed and verified)

MD5:

fb19ba928d43b983159a2d30ed860259

SHA-1:

da892130c103ac9c5f4a932953d985afdd4795c7

SHA-256:

d9f52c811a0c79f5c089a0da9a264d3e3c5ebb80bab4277a1ef91be96f11ffdd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/27/2024 7:28:44 AM UTC (today)

File size:

222.3 KB (227,672 bytes)

File type:

Driver (Win64 SYS)

Common path:

C:\Windows\System32\easyanticheat.sys

Digital Signature

Signed by:

EasyAntiCheat Solutions

Authority:

GlobalSign nv-sa

Valid from:

5/21/2013 4:52:48 PM

Valid to:

5/22/2014 4:52:48 PM

Subject:

CN=EasyAntiCheat Solutions, O=EasyAntiCheat Solutions, L=Helsinki, C=FI

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121B8FD88FEE2CA64F899D7BF868E3A149E

File PE Metadata

Compilation timestamp:

2/6/2014 12:55:54 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Native (none required)

Linker version:

9.0

CTPH (ssdeep):

3072:B023nSRavDEh6rdtkjtMZiEkCEY0iOK5+935eD5jupmn/FM5sQFdz89MNTLfC:B0YvIURtkARkDnQ+jeYpkFMXFdssTG

Entry address:

0x75123

Entry point:

0F, 80, AA, 97, FF, FF, 68, FF, F8, 44, E5, E9, ED, 80, FF, FF, E9, FC, 2C, FF, FF, E9, 07, 39, FF, FF, 66, 0F, B6, CB, 48, 89, C3, 66, F7, D7, E9, DA, E3, FF, FF, E9, A1, 2C, FF, FF, 48, 81, C2, 28, 01, 00, 00, E9, 87, 88, FF, FF, E9, DD, 24, 02, 00, 0F, 85, E5, 8E, FF, FF, 48, BE, D7, 41, 88, 11, 00, 00, 00, 00, 0F, B6, F0, 66, 0F, CE, 48, 8B, 35, 99, 10, FF, FF, E9, 60, 88, FF, FF, 5D, C3, E9, D9, 63, FF, FF, 68, FF, F8, 86, A9, E9, BF, 8F, FF, FF, CB, C7, 4F, 86, 1E, BF, 1D, 38, 5B, BB, 5E, C6, 67, 3F... 
[+]

Code size:

20 KB (20,480 bytes)

Scan easyanticheat.sys - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.