home

easetup.exe

Express Accounts

NCH Software

This is a self-extracting archive and installer. This file is installed with multiple programs including Express Accounts Accounting Software and Express Accounts. The file has been seen being downloaded from download.informer.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
Express Accounts

Version:
4.86+

MD5:
78a10084ff3c49238c402cace6b14fdb

SHA-1:
48cc979a617e49e37552d42cc9c1f4910ca894ba

SHA-256:
e34d937e9f067a6287ee3991fce76187d510631188a9df57dcb071f0204c95f8

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 6:55:15 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Google (variant)
8.9605

File size:
1 MB (1,096,744 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\easetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 1:00:00 AM

Valid to:
8/8/2015 12:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 5:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:dXZYCx5LQJFi0uKC5/4wGfMhIRX2isyIl+IaMPqd69:NZYmuJhRfdsR+DW

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file easetup.exe has been discovered within the following programs.

Express Accounts  by NCH Software
Publisher's description - “Express Accounts is professional business accounting software, perfect for small businesses needing to document and report on incoming and outgoing cash flow including sales, receipts, payments and purchases.”
www.nchsoftware.com/accounting/index.html
24% remove it
Express Accounts Accounting Software  by NCH Software
www.nchsoftware.com/accounting/support.html
About 8% of users remove it
 
Powered by Should I Remove It?

The file easetup.exe has been seen being distributed by the following 3 URLs.

http://download.informer.com/.../easetup.exe

http://express-accounts.software.informer.com/.../

http://www.nchsoftware.com/.../easetup.exe

Scan easetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.