home

easeus_diskcopy_home.exe

EaseUS Disk Copy Home Edition 2.3

CHENGDU YIWO Tech Development Co., Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from scf.sohu.com and multiple other hosts.
Publisher:
CHENGDU YIWO Tech Development Co., Ltd

Product:
EaseUS Disk Copy Home Edition 2.3

Version:
1.0.0.1

MD5:
6a4ab7cd89b3e2d3ca9ce8f19f5adda2

SHA-1:
b5a14f5b89664be6acc3bf9c7062564c3903feab

SHA-256:
26c732cfb80c7d6fdadfce41ea2dcda3d8ffc31c01615509054fcb7b91ff0412

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:47:56 AM UTC  (today)

File size:
43.4 MB (45,460,992 bytes)

Copyright:
Copyright (c) 2006-2012 CHENGDU YIWO Tech Development Co., Ltd (YIWO Tech Ltd, for short). All rights reserved.

Original file name:
DCExportLoader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\easeus_diskcopy_home.exe

File PE Metadata
Compilation timestamp:
3/13/2012 6:39:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:pOk21t8iptstH7T23jsGR7pjEAP56S8nIfs//ieDub6wMs4LMFlZQwK9vG0NDdrs:IFfsH7T23jsGRFjp4Lv6j2GZFlZQwGL2

Entry address:
0x1E1E7

Entry point:
E8, F4, 4E, 00, 00, E9, 79, FE, FF, FF, 3B, 0D, 78, 07, 44, 00, 75, 02, F3, C3, E9, 76, 4F, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 57, FF, 35, E8, 5B, 44, 00, E8, 7A, 49, 00, 00, FF, 35, E4, 5B, 44, 00, 8B, F8, 89, 7D, FC, E8, 6A, 49, 00, 00, 8B, F0, 59, 59, 3B, F7, 0F, 82, 83, 00, 00, 00, 8B, DE, 2B, DF, 8D, 43, 04, 83, F8, 04, 72, 77, 57, E8, 2A, 30, 00, 00, 8B, F8, 8D, 43, 04, 59, 3B, F8, 73, 48, B8, 00, 08, 00, 00, 3B, F8, 73, 02, 8B, C7, 03, C7, 3B, C7, 72, 0F, 50, FF, 75, FC, E8, A7, 50, 00, 00, 59...
 
[+]

Entropy:
7.9935  (probably packed)

Code size:
196 KB (200,704 bytes)

The file easeus_diskcopy_home.exe has been seen being distributed by the following 7 URLs.

http://scf.sohu.com/.../cTrack.do?m=MTQwNDM5MTg0NDc0N18wXzI0OTM1XzM3Mzguc2MtMTBfMTBfMTI3XzI4LWluYm91bmQwJGFudG9uaW9jb2xvbWJpbmk1N0BnbWFpbC5jb21fc3BsaXQyMDEyXzU3MTU3X3NwbGl0MjAxMl8zMTc2X3NwbGl0MjAxMl8xNDA0MzkxODU5ODM2X3NwbGl0MjAxMl8w&p=fd225797f4f6203cef2b18e0ce7a4f46

http://scf.sohu.com/.../cTrack.do?m=MTM4OTUyNDY1NjIxMF8wXzE4ODA2XzU0ODIuc2MtMTBfMTBfMTI2XzIyMS1pbmJvdW5kMCRrYWhydXcwQHlhaG9vLmNvbS5zZ19zcGxpdDIwMTJfNTcxNTdfc3BsaXQyMDEyXzMxNzZfc3BsaXQyMDEyXzEzODk1MjUwNTIxNDZfc3BsaXQyMDEyXzA=&p=c19c78cb2024597f14953dddf2d699dc

http://scf.sohu.com/.../cTrack.do?m=MTM5MDM0ODcyNTczMV8wXzIxNTMzXzMxMTYuc2MtMTBfMTBfMTI3XzEwNS1pbmJvdW5kMCRpdGhpbmtpbXRoZXJlQGdtYWlsLmNvbV9zcGxpdDIwMTJfNTcxNTdfc3BsaXQyMDEyXzMxNzZfc3BsaXQyMDEyXzEzOTAzNDg3Mjc2NzZfc3BsaXQyMDEyXzA=&p=c19c78cb2024597f14953dddf2d699dc

http://scf.sohu.com/.../cTrack.do?m=MTM5MjQyMDc2ODE4Nl8wXzE1Mzk1XzM5NTAuc2MtMTBfMTBfMTI3XzUxLWluYm91bmQwJHJvYkBiaXNob3BhbmRhZGtpbnMuY29tX3NwbGl0MjAxMl81NzE1N19zcGxpdDIwMTJfMzE3Nl9zcGxpdDIwMTJfMTM5MjQyMDc2OTg0Ml9zcGxpdDIwMTJfMA==&p=c19c78cb2024597f14953dddf2d699dc

http://scf.sohu.com/.../cTrack.do?m=MTM5MTg0NzIyODkwOV8wXzI5NDUyXzkwODQuc2MtMTBfMTBfMTI3XzExOS1pbmJvdW5kMCRjb25jaThAZ29vZ2xlbWFpbC5jb21fc3BsaXQyMDEyXzU3MTU3X3NwbGl0MjAxMl8zMTc2X3NwbGl0MjAxMl8xMzkxODQ3MjMzMjYyX3NwbGl0MjAxMl8w&p=c19c78cb2024597f14953dddf2d699dc

http://scf.sohu.com/.../cTrack.do?m=MTQwMTMyNTMwNjE2MV8wXzIzMTE3XzMyMzguc2MtMTBfMTBfMTI3XzEwNS1pbmJvdW5kMCRtaWdzeTE5NDBAZ21haWwuY29tX3NwbGl0MjAxMl81NzE1N19zcGxpdDIwMTJfMzE3Nl9zcGxpdDIwMTJfMTQwMTMyNTMxMjg1OV9zcGxpdDIwMTJfMA==&p=fd225797f4f6203cef2b18e0ce7a4f46

http://download.easeus.com/.../EaseUS_DiskCopy_Home.exe

Scan easeus_diskcopy_home.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.