home

easybcd 2.3.exe

NeoSmart Technologies

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dlgbit.winfuture.de and multiple other hosts.
Publisher:
NeoSmart Technologies  (signed and verified)

MD5:
562f2ea6e41020fd7bf5426bd77cd59c

SHA-1:
7f9eaa9aa18ff1dfd77cb367ae868b761a4c5204

SHA-256:
0f199f79a9d82280e304f0f24bfa9e39d29c4944761ee470b903d0c8f33b0504

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
4/25/2024 12:01:12 PM UTC  (today)

File size:
1.8 MB (1,921,632 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\compressed\easybcd.2.3.207.final\easybcd 2.3.exe

Digital Signature
Signed by:
NeoSmart Technologies

Authority:
COMODO CA Limited

Valid from:
10/1/2014 2:00:00 AM

Valid to:
10/2/2019 1:59:59 AM

Subject:
CN=NeoSmart Technologies, O=NeoSmart Technologies, STREET=4038 N McVicker Ave, L=Wheaton, S=IL, PostalCode=60634, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00BA8AEBC983EE2211B0F97DCAF04D414B

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:ebNkhxcyxCOkON5ky+KTmJFKezYlTfSb9yuV:MXyxCxE5ky1VS0TqRyy

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9900

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file easybcd 2.3.exe has been discovered within the following program.

Toolwiz Time Freeze 2017  by Toolwiz
www.Toolwiz.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file easybcd 2.3.exe has been seen being distributed by the following 50 URLs.

http://dlgbit.winfuture.de/a8bd846fc1ae88de8a709b54c85a5363/585cf6b4/software/EasyBCD/.../EasyBCD 2.3.exe

http://lb.cdn.m6web.fr/d/c/a/0a30ff3cb02163ca9ae2429fb0c6684d/58934412/soft/.../easybcd_2-3_fr_33420.exe

http://w2.getpedia.net/Data/Soft/2016/01/.../EasyBCD2.3.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=092ab042013872eb9249220b723c9c48&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=18ae82be0c5c67ebcb1727a9dd8b04fa&file=1

http://dl.cdn.chip.de/downloads/.../EasyBCD_2.3.exe

http://indir.gezginler.net/i/4108/.../

http://www.techspot.com/downloads/downloadnow/.../?evp=8b4529ddea4b82d012bdec00e27e41b4&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=3889f8d7852cdf54f3d5e54b3c4055ba&file=1

https://doc-14-b4-docs.googleusercontent.com/docs/securesc/0sfcukmnfrdm8tgphc14dpm11fbr18n0/kobcg3jr5vskjh6v3557q03c6fh47ede/1477317600000/02360350236552367512/.../0B57YLCnIGF1_NFFVeWhLXzhucXc?e=download

http://indir.gezginler.net/i/4108/.../

http://dlgbit.winfuture.de/4d4d33cdd3990cbd0f28d431f626d976/582495e5/software/EasyBCD/.../EasyBCD 2.3.exe

http://lb.cdn.m6web.fr/d/c/a/d441cf4b19cc1c597ad68261238ddc25/57fd2fb9/soft/.../easybcd_2-3_fr_33420.exe

http://lb.cdn.m6web.fr/d/c/a/b216babbf49b753b6c87a8694537e5e2/57b006ee/soft/.../easybcd_2-3_fr_33420.exe

http://www.techspot.com/downloads/downloadnow/.../?evp=96a0a7b6c050e08a877af46811c59e61&file=1

http://www.techspot.com/downloads/downloadnow/.../?evp=43a3d0d498617bfcda38237cd79713cc&file=1

http://w2.mien-phi.com/Data/Soft/2016/01/.../EasyBCD2.3.exe

http://lb.cdn.m6web.fr/d/c/a/37a17c70de1a803bc8e59751bd39a02e/585907eb/soft/.../easybcd_2-3_fr_33420.exe

http://lb.cdn.m6web.fr/d/c/a/a9506cfe43916bf9cca02efcbd629741/58299591/soft/.../easybcd_2-3_fr_33420.exe

http://w1.mien-phi.com/Data/Soft/2016/01/.../EasyBCD2.3.exe

https://d16.usercdn.com/d/.../EasyBCD2.3.exe

http://w6.mien-phi.com/Data/Soft/2016/01/.../EasyBCD2.3.exe

http://dlgbit.winfuture.de/e1c032028d9ff6759af8ea73b72a4e4e/57c1a1a1/software/EasyBCD/.../EasyBCD 2.3.exe

https://doc-0o-bo-docs.googleusercontent.com/docs/securesc/m311sb3vn4lrn8kd7ngn12e25utq267u/5g2dv1l9tqs5fkc4mckpfn73qklvi9lj/1479297600000/02360350236552367512/.../0B57YLCnIGF1_NFFVeWhLXzhucXc?e=download

http://www.techspot.com/downloads/downloadnow/.../?evp=c3e319ded6df683df0e6cc6e7a37368f&file=1

http://lb.cdn.m6web.fr/d/c/a/a809baed25eb5dc7b333c89e4c53ea0d/57321280/soft/.../easybcd_2-3_fr_33420.exe

http://lb.cdn.m6web.fr/d/c/a/692c468a6f23a2c459c117dca6b35c11/57f1373c/soft/.../easybcd_2-3_fr_33420.exe

http://soft.mydiv.net/win/dlfile50c05_284126/.../EasyBCD2.3.exe

http://10.51.0.202/~jmasfret/M1/.../EasyBCD 2.3.exe

http://soft.mydiv.net/win/dlfilea358d_284126/.../EasyBCD2.3.exe

Latest 30 of 88 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.