home

eqwizdemo.exe

Equation Wizard installation

ElasticLogic

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ElasticLogic

Product:
Equation Wizard installation

Description:
Algebraic equation solver installation

Version:
1.21

MD5:
0786365797b9fc8fb810bfb764da0da6

SHA-1:
a8ed66df54da7e90a808748e1d9f74f8486f2baf

SHA-256:
3afe891fac45049518fc737de7473c74c4d3f4f7acde9539af08d47d4e4b1fc7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 3:51:16 AM UTC  (today)

File size:
1.1 MB (1,165,915 bytes)

Copyright:
Copyright © 2006-2010 ElasticLogic

Trademarks:
Equation Wizard

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\eqwizdemo.exe

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:muWkhSlD/Y90xEkJAieRsCvIHg7OXcZH9NgMndP1:muWkQlzQ0DJHeR7IA7OXm9uiJ1

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Code size:
23 KB (23,552 bytes)

The file eqwizdemo.exe has been seen being distributed by the following 9 URLs.

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_es&type=PROGRAM&Expires=1487563987&Signature=YKQJeqjp-FrrvmetDxtCvgDDFX9ESvH9~IIIJr7O2JSKvSzlfUCESYrBUjflDoY0-FVFZAOR0B9MzcjDNtmalcVRJleeI1JlWB7XNfuBeV-~67NR5aFNW0V8xfETm0j52MhNcJt9PyO8Od51AKxinKvSDlNn3tGfA9hW8MnM62s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=eqwizard.exe

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_es&type=PROGRAM&Expires=1434015143&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Onv2W6CBaiWjY~Lj-n~zm~pcOcTN4uYFpur2dvsYfkhLFAYAHHSoDVwM705V7mg9GRsjg6RIll8ebONkHXZ67St5O6FRZ55TY6b9h8GKeLe2Bk9Nof1XiGNhg9FAIFmk36HGYAc40ACmQAWnO32lDPIDy7aO9~uaAEndUPQQF78_&filename=eqwizard.exe

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_en&type=PROGRAM&Expires=1432192480&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=JMfHB9wUONtL2LuBur~X1g~7Prla2pupH3tx7FBRYrfhLbShyne4xglVg9Gs8IiM8gttZCqfv7-1akWBlFMxT~VZp2cHDUTT1mX0aKu077c47GV9WUcwMnH567jvr4~KGfaGPCUqFoSZf5uC5VNvXfyjBF95MXJaI-gvxJIMm1Y_&filename=eqwizard.exe

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_en&type=PROGRAM&Expires=1447040595&Signature=Fmz-3MytQS30DxYgo0ScXg70FMrx0EzNVQkUg~TUOjhfrBlSElc9mMENI673PLwKiR2f6f6ARV~Lhv5gDS69zIK9vOfwF7C3Nk6R4SBQKw5uXUMbJ-XIDp8w1tgsgJy7io8Rf7S3bBKWismashdQfCd1RketZKojL5NVmHt6hnA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=eqwizard.exe

http://equation-wizard.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvlbaqpdHqn8d3TA/51bqWxUChQBieWwWEUCWarD1bRmAmw8dyeppxn/diy/rinMUxVDHh0 K/.../qE x30uck lsXSqOP8E=

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_es&type=PROGRAM&Expires=1432796268&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=FeDqW3t00iBss8O7c5mee6q~s2U~3ym~6iFt0Hb2pMm0rPdKSe2isj3MeX5~lOteYGMxDsB4l3K6PJCPNIB43JFySDoeztx-HpdywIne7lJObI9LeJoNXxp~lR1JJ1iNIqrMN64ONGQbVZnGQkqhgH1CRgzn~zkUfSBnmDMEb9k_&filename=eqwizard.exe

http://gsf-cf.softonic.com/a8e/d66/.../file?SD_used=0&channel=WEB&fdh=no&id_file=305010&instance=softonic_en&type=PROGRAM&Expires=1438394797&Signature=fAF4KjS9al8rRiAcFp5dLGoEy-ZQBB6cWkg0JTEdtvExHPmu1lD7hitLzeAM7v8EqkTAFkxVo7MZd~LxHtUsYOTvN3kLDLqcpGaxG5teSv0qfOv9MEu73cP2HoPb9TA633dfI5bAgH4djZJuZdYtVtUJuEYcNL4LzU8MuzXzvg8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=eqwizard.exe

http://www.equationwizard.com/eqwizard.exe

http://www.equationwizard.com/eqwizdemo.exe

Scan eqwizdemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.