Analysis

  • max time kernel
    144s
  • max time network
    158s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    23-12-2023 15:46

General

  • Target

    easybcd-2-4.exe

  • Size

    2.2MB

  • MD5

    2e06476ebe1137f543ee7176d34716e7

  • SHA1

    6eaa6aa0e829ce8af54213f6de77e748c4388e23

  • SHA256

    0a94a43af2db7bdbada87b34bf03d3b221110d1ca21bbebec55b08767c1281cc

  • SHA512

    4f038b1bab87a9c552672a69d2122800e5f6809c6230c2cea4f14000d0c8555393621af0e4e85ef9471a6527d9458a6315576aab9de10058b3c320549f9d0c1e

  • SSDEEP

    49152:vHQLkhcj2sy/yOnZMS3NTQDxX7Cc8kRD7zei:vwLKcjW/yGMoN+Obk1zD

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Kills process with taskkill 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 36 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\easybcd-2-4.exe
    "C:\Users\Admin\AppData\Local\Temp\easybcd-2-4.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Windows\SysWOW64\taskkill.exe
      "C:\Windows\System32\taskkill.exe" /f /im easybcd.exe
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2544
    • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe
      "C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:1612
  • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe
    "C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of AdjustPrivilegeToken
    PID:3492
  • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe
    "C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe"
    1⤵
    • Executes dropped EXE
    • Modifies Internet Explorer settings
    • Suspicious use of AdjustPrivilegeToken
    PID:2060
    • C:\Windows\System32\msfeedssync.exe
      "C:\Windows\System32\msfeedssync.exe" forcesync
      2⤵
        PID:4888
      • C:\Windows\system32\msfeedssync.exe
        msfeedssync.exe sync
        2⤵
          PID:4596
        • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\UtfRedirect.exe
          "C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\UtfRedirect.exe"
          2⤵
            PID:3432
            • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\bcdedit.exe
              "C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\bcdedit.exe" /export "C:\Users\Admin\Documents\EasyBCD Backup (2023-12-23).bcd"
              3⤵
                PID:3800

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe

            Filesize

            965KB

            MD5

            e478c92160a3c73c77cdc9f515dfd8b0

            SHA1

            f0fa230f8c26bcbddc3b68f38ce0793d46c0ca2b

            SHA256

            6a6e16c176004128b918ef3f9ecf1d51d828e6099fba6542b5ac6abdb67c1030

            SHA512

            3682b4f5bc31cd056c3f552da657309093e35b4757c073a223385c04765f622ce9ee000fb5dbc950c68ad7913ffdcc831ef65bd5ed7241f6179ea375b17be822

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\EasyBCD.exe.config

            Filesize

            330B

            MD5

            3379ac7243adcfa51a02295dbedc956a

            SHA1

            469bbae4b1844832809196c89f198029beef4af8

            SHA256

            7ec2512b59e62a3aeb0a1025bf152a31291e17e7e469ce18efae153064665b03

            SHA512

            08d7101b21b87e11aff79cd8b47ec3ba2878cf72406e4d59771531ce6098609f8340607cd8b9ae0721c56f8fba5927c93f0412f0042879f04f2cd223d82430a4

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\NeoSmart.Localization.dll

            Filesize

            25KB

            MD5

            ad0a59ae87d4ba106e965c62f0bc3d88

            SHA1

            5b39b6fd95b5bee72a17d79a1f4958256a5c4149

            SHA256

            3a56005b2efb34620019ef432fe90eeb63726fc78b37be841f25c2aed82eb1db

            SHA512

            562b2cbd3fdbbb71dee9fdb68bd24b9bbf27beab93de338a616baec837910f31ad3b13d75564d45a1cca26e1150517b47d0b3984bae7d08675593bde22bbea98

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\UtfRedirect.exe

            Filesize

            92KB

            MD5

            c781718086a17116f0e4191fdfaf1550

            SHA1

            8055cb83e866912e82b8e361b3718f0576269c0d

            SHA256

            d1cae882e553d7ff7764d43f9e4ddab8bb8188cfdc70a520b6aad189dfd18684

            SHA512

            022b3c59dfeb30472b1aa6151cf64879363fbdbf7d27381fbce17f89c8a7f0e781b66b864922dd61a73ac4c7edcc7ae749fc17331f37769d88dd6073078ff0b8

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\UtfRedirect.exe

            Filesize

            186KB

            MD5

            7afc48e47a436789375c3b42a5ad7a81

            SHA1

            3b4373e5cf274a5e81b29c1561a1a00ed10dd7fa

            SHA256

            532bdb071a5fac55d86e84577c1b2458f2f24844decaac2044bed80fe3174b0e

            SHA512

            d230a85279cc749dab52de17638b40fc814fbd197e5f185b09b9e4150d4f094c3f87e2dd586cf05389abb616023bdac1f6251064316f02274728f4ad8bcbc3b8

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\bcdedit.exe

            Filesize

            88KB

            MD5

            7194ccb98ea1babb5c6e2b025ec1423c

            SHA1

            2699fb5b656d058755404f39c88efbe51b580908

            SHA256

            7d0a78eafe334787b7003eae0c8de61e626c260d46a1dc5bd892b4ef7fafda84

            SHA512

            1dcccd93352368ff18d607a1feeeff675b114b605688bf4301904cbd5504710bdbf40d9d9e1346cac29cb8c0c91abeac8a11c6a1833a78ff9d0ec61ed832317a

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\bin\bcdedit.exe

            Filesize

            96KB

            MD5

            4f5dc25da3816f70e45d77242e6739f7

            SHA1

            e2f2fff73becbf240fb33b00ccd0c4ddc2a0f1f0

            SHA256

            a66b4cbfc430c8f7119d2ede7ee4ccea822530ad332b777d24ffcb9799707af7

            SHA512

            5e772efe12ede218fdfdfe4fde92366364c3bd2fdc000f85f27f6a8d54431be54c218fe0eb6d69db5b97cd179f617adf0ee7dd27600c7ab79f5b76a5a13ded71

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\ar\properties.xml

            Filesize

            186B

            MD5

            89159f29003c36dd7da4161c42606347

            SHA1

            a448050ecdedeefa12c6032b3792a3369d30043b

            SHA256

            2a205ea793f84bac49dc3549c87f606591b44a283d49aae70c69eb646b3ee6ca

            SHA512

            e77d668184175639b0d201e23a9c5b1d763ace339b2bf8ac614c0dc35775dff813a7e89a805c1f98766eb9714f2fc02a156c9dede59240cdb9e20f1254f7a2ea

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\bg\properties.xml

            Filesize

            199B

            MD5

            9ccb633ed2044b5b67261312a0a3c056

            SHA1

            bb248410b363f746ae0f89115a9d512b9e98c1c6

            SHA256

            38370820738b34c81dcfa498434eb54ed7ed10505373ecb0edd94fc4f2f0d6b7

            SHA512

            9c36312b83eeb13138dd7b1149891c7d89eaa8acb8679ee64ebb2c2dd6522acdaa324908752cc142230a2b4e6039cadc06d676e7e5f35a9b867dc96805cae1c3

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\ca\properties.xml

            Filesize

            180B

            MD5

            a714b71a9f9690f25fec26951c951232

            SHA1

            e2a79fdc13419e137491664e0acc1d86a26da767

            SHA256

            afcdcd139142fba46181c44816b445fb91e4533428e2b72b0ede4374339f66d8

            SHA512

            8f4d255987bd5923ae06f3d1d29c11c2a18a210cf534565d9b007b6c3b7b720f759c41314be569a03611d50ac6749c88f86bb0250d6352d7b6130992e531e8e4

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\cs\properties.xml

            Filesize

            189B

            MD5

            1c7cfba3f2a05a270627e03f25cb3e1a

            SHA1

            9a93327622db15072e118473a64bb9cc3ff11a4e

            SHA256

            b6e322d269da30367d4d77d70c875b8464c95088198fe2ada099aa6022fc4fa8

            SHA512

            9d400661ece761212186f65483533326591c815067c97f6df63ac5965002b166dd552f7b39c4da45a73b5d5a91c2e575525470404302e4c8a9cf0d89bb4dc24b

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\de\properties.xml

            Filesize

            180B

            MD5

            a58b4498c7db23672183262ce985ddd8

            SHA1

            59de71ea9d33f527478d80e6b601c4d2862d7451

            SHA256

            13a47f469be7b0b173ba78b874f17a2230281f4768431407670b5cfb06516a2a

            SHA512

            81953e927188ce06230af4ebb3b031e2661aefa3da6d3d49f5c3e8d6c6bc39fe1cbbcd818f330fec2ec29e4edea0aaa7ed72b7c04d0cc8dd78c3626896323b2b

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\el\properties.xml

            Filesize

            189B

            MD5

            81801a5b8c97d1dd05b2459856c81f67

            SHA1

            d7be95901b44e5314b596551650b41576f390c67

            SHA256

            aea9feaa58af7d1bf8ca98ed578ad36201eec5f7600b74eb7b04e832ad312be9

            SHA512

            73fef24de419b5a5df7fe852a4ae4e71686129e1fa16ed61747a77ce89d60cee884707d82d5c38ad817253db1fd7aeaf50d76e89a6774ed1071ad77aae2648ce

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\AboutBox.xml

            Filesize

            1KB

            MD5

            57c22bc804349d6b4c292e5e6fac5883

            SHA1

            4fbf2329b8db7273c2cac2159ef7e021abfc7d02

            SHA256

            d1e45ca02de4d82c4abf4200487a3f9b759239cbc671b8f17fb21969b1c1ad6b

            SHA512

            b7edc55696746049c59d29d3af3cf029b3e9f21c1ad0024ed5421ee32f55d2a9f4d713a272e8a8b2ea359fa649e4451be911037a6e84dbb7ba3e3fcbad04ac5a

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\BcdLibrary.xml

            Filesize

            2KB

            MD5

            9b4be1d3d51da52e41e2a21fec4c97fd

            SHA1

            df4b2426d3f96e2ca9d59b3de0c98718990be442

            SHA256

            5b94b2efbf3ca74dc78dcf49c6c521cd6ff823d5ad238226a400e5e5a8e4b0fc

            SHA512

            6e8fdf99a0998253aa8a6e45dea72cdb07065d914d79847344a6527635fdb103d8bf5be1500c49927e2569f815ada88494e8725cf2102a384110f8c6b8d8a3f8

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\DefragDialog.xml

            Filesize

            329B

            MD5

            314b52187045ec5cb47d3270286cf1a8

            SHA1

            354e0faca02392bb1e3bc188127fa39dbf81e95b

            SHA256

            19a4765488f7574ff0fe54ee538df47968b3614f716369e2874a31735c007620

            SHA512

            768173d405d0e6d271216fe81e856a3f3bd9af830d4a96721cb8098dccac49ceb7c532afb8baa1d74ca5f951b8f02b3e0aeac83a1ab0ff790c9ded6eb8ed5b07

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\DonationDialog.xml

            Filesize

            1KB

            MD5

            96d0729ab37766f2a749d6fb4f594936

            SHA1

            4d6239e47562df05b45f5b9e38a111317b623f1b

            SHA256

            7ebf9f1dce431c3ecc61f398751338517b2b6f7bac9a289f6232e26c663dc391

            SHA512

            bb3736acc931f5f99879c81cd8640e6f35815cce9becf666e14e706bcef57eac611efa1b850919c1fc4a4ca47d93e52a2b5eba1d32cc2fe55be792bf2e57389e

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\DriveSelect.xml

            Filesize

            997B

            MD5

            e2fdc84096a9b2e5a9927070021c48de

            SHA1

            11d1ef6208b3ece6f3f280efd1ae2b55f55d1c82

            SHA256

            2f5186a8f12d42176de86d4962b5dbb6ddd9071d2f5d1cdc51eb2f124c6a50ac

            SHA512

            2bad387cccb4938b91272ef495dad91a7fdaee327d69959075217f00ecd3d11e9a9feca68c3c47957dd50d02049aefebedc8e9a8628a02643e0c753f9406cf09

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\EasyBCD.xml

            Filesize

            18KB

            MD5

            6d85acdb10090c82a8ef6587c9dbb7c9

            SHA1

            4154908d0a05d93531eab09853c2053455456754

            SHA256

            a941b2c1fdd614e5145161aadb56c0f5dae4836bfd6b29018bf6d5fb99280aac

            SHA512

            dc261dfe778240913775389c687159e86d3ec1bcc3f8593ce76145c2b9185fa52e75fb8dbdd255085e313e8f860c25c578b1967c8d8cfe82b57fa8246bbd5527

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\EasyRE.xml

            Filesize

            1KB

            MD5

            c33d9d4eae1c16fb973a1ff94dc759f2

            SHA1

            baa4871b1222c4ee140589d024af321ae9b3f11c

            SHA256

            daed6dc83fb3c08023cce6728b7c60b30174a00fdea7f97af65d04c34c5880a5

            SHA512

            ae492299285e085d00c6eeaf8d2c3971183267c8e223384349f7fc92616645bf34882ff3675a6baab0d451778cddfca11224df4ca695d46d3fb4dd3139f24485

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\LanguageDialog.xml

            Filesize

            399B

            MD5

            928d365e6227dd6858ed623b28e21158

            SHA1

            85305451574575ab97141cf844c5ebcb60a6895b

            SHA256

            96c6c5effb537c5fdb8b3b8f907fef21bdb3eeaee6a4c6ff12f064bef342d209

            SHA512

            7d092bc0dfe2bedb7fb84e7ab56500bfb143c15b2baacbd001e06c6d36d43fe216ee5e68a8e328a64f5668be319dcf6b8e8b448b50953305ebeead7c05727295

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\LicenseDialog.xml

            Filesize

            1KB

            MD5

            0fee3c196f488b5e0628989fda34c0df

            SHA1

            c41d95d996896769a6a745eac25802089b9963d8

            SHA256

            33f23516c1853a17e41edc603d860b8ead64cb1bdb9c27925629282166a539d2

            SHA512

            829b1948407d92036aee161d410606e79c23c7c477d874119c849bcb2004a44beff74f5cae881686e286e28dd134f85ad9b44a73e6adad61f6126ab52315f1d3

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\MainUI.xml

            Filesize

            12KB

            MD5

            e9f36537dfe6333eb2affc5fd010e290

            SHA1

            8eb2c560ec375830b3b699c65b8b9b8c68fe9014

            SHA256

            eedfe23ab06b57b87774a19b5e4b8b5d7d59169b1a978197a28ffb7b7d46399b

            SHA512

            213b7fc186b8bc9400bd6bb78c97a4ac23279d33317ca684e076706ab3ed5801cc6830f7cdafb018e0a5e1fe42a36c73cbc55162fddc3a5de988cc733ff96241

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\OptionsDialog.xml

            Filesize

            2KB

            MD5

            2175b75eec134dd2beae5c64465835af

            SHA1

            8b20b04f63fd4b5fd35b1c6e0500bfd741ebd85f

            SHA256

            299f7cc883e64e72b093a8be83da0627d8fc87206d8b0f6a360200e8f9d85823

            SHA512

            95fa08e628b5b3ed5fd415e2e83e01c9956da18b37efe5c9f9e9a5874c1730df1177ed5cd01481105a33da77fd6e8601a57f36dad4a57b7bce6e1b85211e7819

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\ProgressDialog.xml

            Filesize

            360B

            MD5

            b71bcfcd26da542cdc999461273a5f8d

            SHA1

            8ead413c2af8e562439d2493f53ea2213b408780

            SHA256

            787fae5a46c80688d65ef3ae0d238af468636747e1e80f48283ca22a8b46bb1c

            SHA512

            135a1e12390601acaf7b3fe283f8d80856bffb031077939c998b7049d1d56855c374cec7b268e1061063494411aba646dcac725a01a02d7e4913fc5cbe2631cc

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\SdiMaker.xml

            Filesize

            782B

            MD5

            44e86fb9d4f0143d20c4bcebfd3a6a0b

            SHA1

            64b034817dec4764e3d03fb15df7e4187dbf3eb6

            SHA256

            a69e3291bdca335d32871d8615f1bb9e47e7132c157f87514d3843f07b29f86a

            SHA512

            08d6412a9a054da5f9d16d89015860efd099ee22510c73b7e1e49fee1433ddda7f7af7840262e421bb0fe595b9a6fa04f0d088fcf5506a254c0fdb10861c26db

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\en-US\properties.xml

            Filesize

            180B

            MD5

            b15bdc1412728c5baaef79cc09e73555

            SHA1

            998c68baee96c3d34035a3b63b49ba58203d3aff

            SHA256

            b8a414bfd8078839d7fc94ab64b63f03f75aa71016fe021a48fe6b3be3173126

            SHA512

            fd211b0517fb09075306a65eab59a195a0b41172e6fda1ea072dc8b240747c70068b993a76085f5a6f9f29c87df58f50b3eb140740ce8dc0f1c467c590d48d7d

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\es\properties.xml

            Filesize

            181B

            MD5

            24980c9236c762569fac2f3ffc3a3e10

            SHA1

            d8380bc3d26130309ad00f1cd9a0244e4243dc80

            SHA256

            05f9e3c442d844db5f7670face7491ba06ea36ca39dcf9399f3523b73533da4c

            SHA512

            ee99c87f1dbbd89c4df0d8976114219fabb9e3c784c5a8c55f7069a756ea1b9bab2ce30cb84258ed5abb5fc7283797266ca12b6b13f8fe7cbfbb2045ecaea22f

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\fi\properties.xml

            Filesize

            180B

            MD5

            151a76df53f9522669ad3711b2f98dbf

            SHA1

            3dc70444f61648e36b014fbf2e8d1e5d9b052bfc

            SHA256

            65ec459523f97c31239e707368f47485ffaccede48869e2545e8886d7ba93a63

            SHA512

            772e0c04f0678cc175d137d6a1e3cc65d64683d0717a81da192017f2da601e5f15d142c373704fc8a2e819e3694794e3b1927c6f2798210cef6429492bca4118

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\fr\properties.xml

            Filesize

            182B

            MD5

            01c5765fff28df5ab1e619fdbdb1536f

            SHA1

            73b95005f7516ba228c3c6112261fc42d219cc10

            SHA256

            c42345da25d4e1061d982c5dea87addfbc23d3a74cd6330b3e1070638c23c842

            SHA512

            6cc17f8d0b941990846e209731da095261358092c53c9fb2b5db3519678e50e62d161672a14fe45c222c8620a46f8d4cf384754c63adf6319192bc22b13f6a0d

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\he\properties.xml

            Filesize

            183B

            MD5

            e3030ba887f98057e14cf750db78ec61

            SHA1

            840fc0afbef4990e7f3bcc3e3ad73ff08128dcd9

            SHA256

            dcc2e94794400a30c8d7b1b9972b678e1d212d2450678c2c66de44753f2d1634

            SHA512

            fda37f0222270518f84a2aa6a09924f01c6554bfd4e6032f0a1e2602e1ee8c9184d38a208c5768720c8cb2f238e51f6dabefcbcc7e72e24e0c56173fd4e4cafc

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\hu\properties.xml

            Filesize

            179B

            MD5

            e98525bc3765790290ab0e4391dd734a

            SHA1

            74d0a72056371ec81d839c3923202cbac284965e

            SHA256

            5549bb91cb211155de224687f457928f462ab1b33bc25a2a9a47c8ceac5045d3

            SHA512

            78e13fe2b0f881fd090a596cae897c02dca3b3cfc454ad7e2d284fd6b3d8365a59024ae542bafa5e79a227bf87454531d7a49a51ac8a0fd8b7b204a6b6db9eb8

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\it\properties.xml

            Filesize

            181B

            MD5

            80618ee927d60e0c76a6f26cd23ef2bc

            SHA1

            664e69598d96364dd736fa460035b3a585aa79cb

            SHA256

            8b68ee5de07ff96e991d40f69a0e3e0b0ed6d557de05702f46c9cda5652706e4

            SHA512

            19c2bfedd675650dfd0666af6a1dac051d0163fb8cee1abfa76700669aa44fb1c31e98b70238413c8fe95cfd181e6f3cd610bbbce7f03d139863ceb19632c7dd

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\ko\properties.xml

            Filesize

            182B

            MD5

            4ca82ba76ba620eaefa73b9a9804debe

            SHA1

            c1f355034abde7c3d625a15c031abb6834f6fc43

            SHA256

            3f4baf5ac2c342d5df9dbfa00000a60e82e1d557e70501235b9b292e14f5a53f

            SHA512

            f52c914d21dcf555542467769c77eeab25a1650006ba8edd5bdbfcc3563a01f09610ce5d5077c8542501c04947b98c5ddb42ae0414974d8a278d323aa1a453df

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\pl\properties.xml

            Filesize

            179B

            MD5

            d49fe9bc96a4190c531633ce38f830a9

            SHA1

            0968278da799e430cdf39814bcc09d074b5475ce

            SHA256

            2ea52f03f10ae2deb4cc8ea670748300db8debf155539c87f5de2fb540d93541

            SHA512

            d7ad430077e836a1c35c9335dde053fff4b246defbe44a5740c22c9bd5b4a97cb1a2503b8b5f7e3376fcfdb2253de4f42d27589db429673abc4c5a89551d7ce4

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\pt\properties.xml

            Filesize

            183B

            MD5

            0cc787cfef9cee9e59e00fd7723487f2

            SHA1

            3e8c0dd6ad350ef35caeb6c70d7e220fd465a88d

            SHA256

            4c374df5b2d7aaa9d62c36d5f40fd4ceca4787b1e17e8cf3715c1fb8c950d71f

            SHA512

            42069b75ecf3e93b98431eff20056dadab3ba9b14f3bf3d8d78d4605cf4c23775691016efe21b362dd4233fe850adbb06cc8e69a2f36debd4ee42e2c5dcf10a9

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\ru\properties.xml

            Filesize

            187B

            MD5

            441992f49ab7ffa73f826383ec6b420e

            SHA1

            cb5de3ad4a2a4f1d469f90efa926083a8fb5bdd2

            SHA256

            def731ab68cff2081d712527e9e0068259c19e974001e38072c46a18a90b5b9d

            SHA512

            c970d0569a5dd85ceb71cd25bad8eb1482a4d1bcb1f5de7d2fdba36027ab419c3f604c5a7dd894c48fb230f8e1a843ef9f21fae6beffb1fab1afb7e000d50e24

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\sl\properties.xml

            Filesize

            186B

            MD5

            fce9ea94a832172cdd5b1bf4d229bb5e

            SHA1

            939b6494ac39d4e8b0880c4ae9e75b85b63576df

            SHA256

            a21d44c9ea6e1c7f0aeb5884cac269d84b1d4fea74ea03638ed043f8b053e3fb

            SHA512

            585ce0b0f7f896ced05733645abc87ed1ec8c3d899c59c46fe2f7227c4cfde59aba7587507b1d7491105673436f4994a0d274a6a644adcb67da17c5da77e135d

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\sv\properties.xml

            Filesize

            180B

            MD5

            acff5cad408f70cfde6d7d98e82f42f4

            SHA1

            cdccd36d5e49336403e72b5e29f87251abc417da

            SHA256

            b1a2ef6faf673812709518e03c448e8ddd7f3da0504c9e26c075d1704a4c4057

            SHA512

            c2bcafa07389060fcbe7dc345fceb0c58b09589096767761729f098ead73607013b8e784f602fbae687ef8bfdd0b5a6833fb9c253e19c2f5a234dcae0b6a1d53

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\tr\properties.xml

            Filesize

            181B

            MD5

            3d561daea9e95bf5dea3b1c4859caabf

            SHA1

            c2c7cb9ef61b6f5fb1d30b41cbc2ac28086ceb96

            SHA256

            6b79fc383b5518f761672986399438e7c5f5ea88a7509beea48b456e5b4ba287

            SHA512

            9fb4a896f5423d977703128096939750f09be4ead4f5b39bba8bd59f92b0f803aa5e024e03e64e481792ae878233d90225633eab77e7fe385a2eb3361e2e761b

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\uk\properties.xml

            Filesize

            193B

            MD5

            d36e2e6f03dcaefe8a6c7ee084d3d3a0

            SHA1

            cf893e29e83e49200b69d03e754bd49366fc8cd3

            SHA256

            96d05ab2b19e19ef3ac8651d0d61cf05fa3a2c8b36712ad83a855800d244dce4

            SHA512

            e92b9716aa752d18d97292a78ee54c59f9c720cf85a4a07f5ebc137fc1542e918de473761f201ace87fdf55efe1d05bf1391cb91df0298cb873f08efa330aa41

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\zh-CHS\properties.xml

            Filesize

            185B

            MD5

            ffc617abbb2838282325b8cecf00e7bd

            SHA1

            2976b8271ab71c1de06989486e5280cf20b9ff44

            SHA256

            dbddd1a41b4ac590de941b70e19073078c23d8bed87bdeddca3d9e2f47036483

            SHA512

            f493f2b31b3ed6699555dc7141f53ab9e0fb6b50bfa8df639319cc39c100289b67d3add0232f48a4e75304e79660ff131464789fa8a9c73a42060ab4964f4a9f

          • C:\Program Files (x86)\NeoSmart Technologies\EasyBCD\lang\zh-TW\properties.xml

            Filesize

            185B

            MD5

            6fa77b1b9788e6082e94bf3a6fa968a2

            SHA1

            93be8a41de48defafe11ec195817ae43f6979166

            SHA256

            5a58a498e3c6e34cb068382c93f7fdd4d95ca89af565016be54d648f9bab86d3

            SHA512

            0a460bdd4b352e1850400989731715c3c7fdef6dcc11d3a324a564c0ed690b99f654e0660178c29e28aeb8e1c4762d275a482329f71e6e4e483ddd9c27be4cf9

          • C:\Users\Admin\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms

            Filesize

            4KB

            MD5

            28fd5055adb6812fcdd0417e085d9015

            SHA1

            f0cef2034afe3a8f8967d412d59319f125c20d36

            SHA256

            a0f2a42e7239bbc69c646c13b4f16037923c0cd0216e9f0f443242b3321d0e8c

            SHA512

            eb19dadbe72df8c875b86fc58acb90b7b95387edc6f119c1cce808bb714ac10fb4be5ddae6fd11ca23dc7be5cd0bd2d61dd73dd149303669da9f4fc9b1cd1f61

          • C:\Users\Admin\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms

            Filesize

            5KB

            MD5

            7cf9f99d5b7a38a09d885b964f8cb464

            SHA1

            d9deedf430882982f52d56864e404dd89c7a3e46

            SHA256

            4fc8ae3f3c6707852221fec01e0dca7ebce7121c644a9c0d9ae5123d78798469

            SHA512

            9d6fb3df82d85fbe7061305af636ed5365dc87217971e6102a5197428fa211a545eb99b0d8ce19ab0078c8020f9d67501c2a7b83da8fdeeae85db80852fffc48

          • C:\Users\Admin\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms

            Filesize

            5KB

            MD5

            207b6172094aab788c21a01a028bf513

            SHA1

            62632da6847c8d547690cca29fa0d278f2d9ffa1

            SHA256

            ccd1280230864d490de0d5ec1e225596b21eb213c9b9df7cea403facb8a832b7

            SHA512

            8464fb6724c2a50c6728a5bb91baf7691043f690bac6dafc06003f17430e97b5734582e2b334a98e4c1886cb12364d82d23896761a4d86f79e3db1c1577fcea1

          • C:\Users\Admin\AppData\Local\Microsoft\Feeds\The NeoSmart Files~.feed-ms

            Filesize

            32KB

            MD5

            73c2cb7c46cd484b51af3c3624272787

            SHA1

            dcf79f59bf86611b45944b948ea62ec8e25521b8

            SHA256

            5fc892884aa89ed13fac2c72a1f358308ddc755a2b88bdddc1030c8f86119563

            SHA512

            287728f84c76fc0ae375f1d3842238263da97ae3364cf31ef20ed7776bf673e3cd2fcc323f0cc2995663ad0c32d209ed299f6484b95745a953a51f7102df27af

          • C:\Users\Admin\AppData\Local\Microsoft\Feeds\The NeoSmart Files~.feed-ms

            Filesize

            32KB

            MD5

            fbbd1f2580bc2a14b5b4f7fb665b838c

            SHA1

            e06da190394eebf6bf27c27cf3482c4b7b849183

            SHA256

            5f3b900ccce7cb64defbb0db8930d816f36f9a181808966e4a39a45652549237

            SHA512

            56eee856e6d36613740ad9934d11f7eacf65fd95140278247bc000a4061872132f273fca5d1958585bd92d1f368618e58b32b0cfd6dd7ca921c5b1a110398141

          • C:\Users\Admin\AppData\Local\NeoSmart_Technologies\EasyBCD.exe_StrongName_ge4xjewlvhidmksvx1etlpptdtrgpnqg\2.4.0.237\user.config

            Filesize

            1KB

            MD5

            3296c509c2f9748f30777dc9bedbecaf

            SHA1

            8678bd26f811774bc17532fc8078f8d9e73f6559

            SHA256

            5037f76e3931ced5b8dc3623f3ca454f48013ec8f1b7e45b3ec3ca34675f2188

            SHA512

            eb42e7ff248a226a0ab1aab3d346dc3a3cf35e02593492b2756ce8e0f39461c51f00c1ea98453362ff7bfdb7355e1e3204420698e6e4139a41a7f6d4fb7da31d

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\InstallOptions.dll

            Filesize

            14KB

            MD5

            8d5a5529462a9ba1ac068ee0502578c7

            SHA1

            875e651e302ce0bfc8893f341cf19171fee25ea5

            SHA256

            e625dcd0188594b1289891b64debddeb5159aca182b83a12675427b320bf7790

            SHA512

            101da2c33f47bd85b8934318e0f0b72f820afc928a2a21e2c7823875e3a0e830f7c67f42b4c2f30596eaa073617790c89700c0d95b7949ec617e52800b61d462

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\System.dll

            Filesize

            11KB

            MD5

            b0c77267f13b2f87c084fd86ef51ccfc

            SHA1

            f7543f9e9b4f04386dfbf33c38cbed1bf205afb3

            SHA256

            a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77

            SHA512

            f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\ioSpecial.ini

            Filesize

            673B

            MD5

            18945704e714d614762392f0e66adb17

            SHA1

            09381ce4a00682e4981115b08f6d02ebbc7af979

            SHA256

            0fbbbf7ef85f31ea4365ea7870e3aac68b251cb307e959c170e1da853324b9a2

            SHA512

            3d0dd9cedb120498f310fd20f345205053a2bf77883a1bac5603d67f9590038ef8c54c4b5bc7f0bf9fcb950fe2bf0b36d87a5f71b4819d167587e2393c701b61

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\ioSpecial.ini

            Filesize

            712B

            MD5

            6e1449b8572771b53f7d9e70920a0b02

            SHA1

            dfeeb3a83a0a8302811fa70e14185f29cd7b2946

            SHA256

            b58b91db53057b6ad4bdff761af7190493a3793a1d1dd340d780228457ce5e36

            SHA512

            f0e721a5fb94ac413670ce87ad2a6c9f51b877df3a1c1f6e4e1299c174677f159844ebd6eaa7e4e7cfb57ad90f4f91304d24bcee2f364260055fe66171d5cf2e

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\ioSpecial.ini

            Filesize

            633B

            MD5

            1182a0000b88dcead6c4863255d91313

            SHA1

            fa180dfd11c98f9f5fce7585dc128c8794084e81

            SHA256

            612558d44c8d6352e74af69d1a577841c3216d504ff7cb1252cbb931096361be

            SHA512

            095b56f5d404871a862e0f32ddffa15d40a16efe80ecd0d006c605f415c8b0e7fe2b15240e2843c0b64d4c556381b7bb9bdfe8b4a716370ffde6890fc79f2815

          • C:\Users\Admin\AppData\Local\Temp\nseB78A.tmp\ioSpecial.ini

            Filesize

            646B

            MD5

            db102fb3277770715a27cf0e20482537

            SHA1

            efbe658d03c2c5e37e9a116aaa79d3f2c24d7f44

            SHA256

            3f33fe23c374eb31232bd92a9bc54da20b1da0c4b3fca8bdf5e4606b917eb155

            SHA512

            1fde9c914ff71139de10099ae2f1c76a0156c4989a2eeee8b695a841b7cb3c567671fcf36ef3a75f7c02c5bd9ad86f3444d51ff8c8c5d32a28296ffed45ca7e3

          • memory/1612-528-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/1612-536-0x000000001F1F0000-0x000000001F234000-memory.dmp

            Filesize

            272KB

          • memory/1612-580-0x000000001BB00000-0x000000001BB10000-memory.dmp

            Filesize

            64KB

          • memory/1612-535-0x000000001BB00000-0x000000001BB10000-memory.dmp

            Filesize

            64KB

          • memory/1612-577-0x000000001BB00000-0x000000001BB10000-memory.dmp

            Filesize

            64KB

          • memory/1612-532-0x000000001CDC0000-0x000000001CE34000-memory.dmp

            Filesize

            464KB

          • memory/1612-531-0x0000000002E80000-0x0000000002E8C000-memory.dmp

            Filesize

            48KB

          • memory/1612-529-0x000000001BB00000-0x000000001BB10000-memory.dmp

            Filesize

            64KB

          • memory/1612-527-0x0000000000B90000-0x0000000000C86000-memory.dmp

            Filesize

            984KB

          • memory/1612-573-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/2060-587-0x000000001BEF0000-0x000000001BF00000-memory.dmp

            Filesize

            64KB

          • memory/2060-584-0x000000001BEF0000-0x000000001BF00000-memory.dmp

            Filesize

            64KB

          • memory/2060-583-0x000000001BEF0000-0x000000001BF00000-memory.dmp

            Filesize

            64KB

          • memory/2060-581-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/2060-606-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/3492-575-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/3492-576-0x000000001AFC0000-0x000000001B034000-memory.dmp

            Filesize

            464KB

          • memory/3492-585-0x00007FFA15EA0000-0x00007FFA16962000-memory.dmp

            Filesize

            10.8MB

          • memory/3492-582-0x000000001B030000-0x000000001B040000-memory.dmp

            Filesize

            64KB

          • memory/3492-607-0x000000001B030000-0x000000001B040000-memory.dmp

            Filesize

            64KB

          • memory/3492-608-0x000000001B030000-0x000000001B040000-memory.dmp

            Filesize

            64KB