home

grindeq_mathtype-to-equation_2007.exe

GrindEQ MathType-to-Equation 2007

GrindEQ, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
GrindEQ  (signed by GrindEQ, Inc.)

Product:
GrindEQ MathType-to-Equation 2007

Version:
3.0.0.1

MD5:
e067fdc6554d79d90f30d83ed573e8f7

SHA-1:
d02caf80fdf6bb9bc143ae7bf1141fbd4cb045e7

SHA-256:
11caa14fc34957a339def1b6e6cf70fcd6d65a1d1544df2d7bf4e63f08232ae7

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 12:22:10 AM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
Trojan.Win32.A.Gena.4571064[h]
2014.3.20.0

File size:
4.4 MB (4,571,064 bytes)

Copyright:
© GrindEQ

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Digital Signature
Signed by:
GrindEQ, Inc.

Authority:
GrindEQ, Inc.

Valid from:
5/4/2007 3:26:20 PM

Valid to:
5/1/2017 3:26:20 PM

Subject:
E=info@grindeq.com, CN="GrindEQ, Inc.", OU=GrindEQ, O="GrindEQ, Inc.", C=CA

Issuer:
E=certificate@grindeq.com, C=CA, O="GrindEQ, Inc.", OU=GrindEQ Root Certification Agency, CN=GrindEQ Public Primary CA

Serial number:
04

File PE Metadata
Compilation timestamp:
2/17/2007 12:48:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:AZf5PIcEAq+w0jP5owIz3J1qk2euabRtlBWRKGD4dG/DG3TvEz:q93w0Diws3J7lTxBW/DJsTvEz

Entry address:
0x3154

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 14, 40, 92, 40, 00, 33, F6, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 74, 72, 40, 00, A3, F0, F4, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 60, 98, 42, 00, FF, 15, 5C, 71, 40, 00, 68, 30, 92, 40, 00, 68, 40, EC, 42, 00, E8, 31, 28, 00, 00, FF, 15, B4, 70, 40, 00, BF, 00, 50, 43, 00, 50, 57, E8, 1F, 28, 00, 00, 53, FF, 15, 0C, 71, 40, 00, 80, 3D, 00, 50, 43, 00, 22, A3, 40, F4, 42, 00, 8B, C7, 75, 0A...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file grindeq_mathtype-to-equation_2007.exe has been seen being distributed by the following 8 URLs.

http://lb.cdn.m6web.fr/d/c/a/4bc4efb490a53a85a930025333939051/585d29c0/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/29c3f4e4a3341497f4269bb8d863c07f/582c42c8/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/d2c611ef1713aece21456060dfedd0e9/5799c13a/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/c1f78ed6bb1fda5035f7c6c3bf6c1b5d/57f5a894/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/c44b71a709a20d2b6d1da57120dccddb/56223156/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/5655310e0eac0b998e4571a1b06605e7/576d09bd/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

http://lb.cdn.m6web.fr/d/c/a/e4185cb64f4999e3c3a136d948019523/578f507e/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

ftp://0923bc87e1c5116f2787b37969b8af8a:1334360468@longtail.archive2.clubic.com/longtail/longtail/0172/.../GrindEQ_MathType-to-Equation_2007.exe

Scan grindeq_mathtype-to-equation_2007.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.