home

EQNEDT32.EXE

Microsoft Equation Editor

Design Science, Inc.

Publisher:
Design Science, Inc.

Product:
Microsoft Equation Editor

Version:
98111900

MD5:
f801435a5aa2b46d8f5d6de35d56fc08

SHA-1:
d23d99cdc8849a1b44004ccbd8a2bc4f83e1970a

SHA-256:
db809674330dd2c78b7eb42cec459a79b4fb6c8a54f10d24a04bd0b0fd01d313

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 12:11:24 PM UTC  (today)

File size:
507 KB (519,168 bytes)

Product version:
3.01

Copyright:
Copyright © Design Science, Inc. 1990-98

Original file name:
EQNEDT32.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\microsoft shared\equation\eqnedt32.exe

File PE Metadata
Compilation timestamp:
11/19/1998 2:09:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
6144:2ya2LiudF61qWeiEzOFjJIouZIi12HMnbNX6lgSrxDe2AcMUEV6smxc:2yXF4eiEzUdbHuElgAxDeHVmxc

Entry address:
0x4CD50

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 10, 33, 45, 00, 68, 70, F0, 44, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 9C, 68, 46, 00, A3, F0, A0, 45, 00, 33, C0, A0, F1, A0, 45, 00, A3, FC, A0, 45, 00, A1, F0, A0, 45, 00, C1, 2D, F0, A0, 45, 00, 10, 25, FF, 00, 00, 00, A3, F8, A0, 45, 00, C1, E0, 08, 03, 05, FC, A0, 45, 00, A3, F4, A0, 45, 00, E8, CA, 09, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 2F, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, C0, 20, 00, 00...
 
[+]

Entropy:
5.8686

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
325 KB (332,800 bytes)

The file EQNEDT32.EXE has been seen being distributed by the following 2 URLs.

http://dc368.4shared.com/download/.../Equation_Editor_win32_.EXE

http://s10093.chomikuj.pl/File.aspx?e=T0Uyit-x1dI2mxMOvtkj6UU_HBx9vBn7zSe_WGw6XB5a8WFIhXw1m4gdPBQgGuc8hK_pSIu3-nWFRv2VWLiZXPs61kKkdqLKQRXyVZOxKzkcWx3PAP4wcGgJo2PXOv00jMLc1HW4Q39_YyDWaHqj6Y0fgt85LTBGLxQLEPuuUg4&pv=2

Scan EQNEDT32.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.