Gridinsoft Logo

The 40770e79f2b99f3e484c8c0f04f0bb784356558fc810fa15b04972b1a8d01d54 (Easy Anti-Cheat Bootstrapper (EOS)) File Analysis

Technical Analysis

File Name 40770e79f2b99f3e484c8c0f04f0bb784356558fc810fa15b04972b1a8d01d54
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
24576:2opGDjnvrPpkjos0OtjcFc5kM49dj+IuxWQOIjuJuVvhbqL0HtFcgekRP9dT0WNI:OnvrPGT0Egyudc4tI3bqL0NFchaP9dTy
Scanner Version 1.0.148.174
Database Version 2023-11-26 02:01:42 UTC

Suspicious File Detected

Detected by 38 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
53%
Detection Rate
1,539,767
File Size (bytes)
38/72
Engines Detected
2023-11-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
26c37ad9dd739320881fc91bd4081145
SHA1
32c16575012e09af87d86c089243db2745e0549c
SHA256
40770e79f2b99f3e484c8c0f04f0bb784356558fc810fa15b04972b1a8d01d54
SHA512
210f7cc4745af472b28d79be7228bc2ddd8a13dcebd5aef32feb8f16a5ca36452a624001ef5fd5ba76ec6f466c248eea371877ffc321893452ba7dc1a415d35e
ImpHash
078471ac5a76189ffe465abe0c89c6b7

Security Engines with Detections (38 of 72)

Bkav
W32.AIDetectMalware Malicious
MicroWorld-eScan
Gen:Heur.Mint.Zard.45 Malicious
ClamAV
Win.Malware.Zard-10015589-0 Malicious
FireEye
Generic.mg.26c37ad9dd739320 Malicious
Malwarebytes
RiskWare.Agent Malicious
VIPRE
Gen:Heur.Mint.Zard.45 Malicious
Cybereason
malicious.5012e0 Malicious
Arcabit
Trojan.Mint.Zard.45 Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Elastic
malicious (high confidence) Malicious
ESET-NOD32
a variant of Win32/Agent.ADVG Malicious
APEX
Malicious Malicious
Cynet
Malicious (score: 100) Malicious
Kaspersky
VHO:Trojan.Win32.Tasker.gen Malicious
BitDefender
Gen:Heur.Mint.Zard.45 Malicious
Avast
TrojanX-gen [Trj] Malicious
Emsisoft
Gen:Heur.Mint.Zard.45 (B) Malicious
DrWeb
Trojan.MulDrop24.22194 Malicious
Trapmine
suspicious.low.ml.score Malicious
Avira
TR/Agent.azfwy Malicious
Kingsoft
malware.kb.a.878 Malicious
Microsoft
Trojan:Win32/RiseProStealer.PA!MTB Malicious
ZoneAlarm
VHO:Trojan.Win32.Tasker.gen Malicious
GData
Gen:Heur.Mint.Zard.45 Malicious
Varist
W32/Sdum.Z.gen!Eldorado Malicious
AhnLab-V3
Trojan/Win.Generic.R624285 Malicious
BitDefenderTheta
Gen:NN.ZexaF.36792.Dv1@a4aq2Fpk Malicious
ALYac
Gen:Heur.Mint.Zard.45 Malicious
MAX
malware (ai score=82) Malicious
VBA32
BScope.TrojanPSW.RisePro Malicious
Cylance
unsafe Malicious
Panda
Trj/GdSda.A Malicious
Rising
Downloader.Agent!1.D93C (CLASSIC) Malicious
MaxSecure
Trojan.Malware.121218.susgen Malicious
Fortinet
W32/Agent.ADVG!tr Malicious
AVG
TrojanX-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
CrowdStrike
win/malicious_confidence_70% (W) Malicious
34 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x004e665b
Compilation Time 2023-11-25 11:25:59
Checksum 0x00000000 (Actual: 0x00186f9b)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 12 libraries
Exports 0 functions
Resources 2 Resources
Sections 5 Sections

Version Information

CompanyName Epic Games
FileDescription Easy Anti-Cheat Bootstrapper (EOS)
FileVersion 1.6.0.0
InternalName EACLauncher.exe
LegalCopyright Copyright Epic Games, Inc.
OriginalFilename EACLauncher.exe
ProductName Easy Anti-Cheat Bootstrapper (EOS)
ProductVersion 1.6.0
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,269,688 bytes 1,269,760 bytes 6.58 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D040EBC5B3CC17E30C0B577D592CDD4C
.rdata 0x00137000 219,866 bytes 220,160 bytes 5.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0145C33EF3341E9388BEA5228EB7C9D7
.data 0x0016d000 13,744 bytes 8,704 bytes 3.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4ECB5603BFB46DA274FD636546536AA1
.rsrc 0x00171000 1,360 bytes 1,536 bytes 3.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D4EA4FDC248A3172AC6E8D12463E8BCF
.reloc 0x00172000 38,288 bytes 38,400 bytes 6.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3DB41AE49238F49A47A7BE02621C3BA4
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 2 (1,197 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 816 bytes
68.2%
RT_MANIFEST 1 381 bytes
31.8%

Certificate Chain Analysis

Certificate Information
Product Easy Anti-Cheat Bootstrapper (EOS)
Description Easy Anti-Cheat Bootstrapper (EOS)
File Version 1.6.0.0
Original Name EACLauncher.exe
Internal Name EACLauncher.exe
Copyright Copyright Epic Games, Inc.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
38 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware