relation to grepWin.com

[dgeissl]

Hello,

sorry to even post this, but I wanted to make sure my suspicion is right and maybe warn a few people out there.

When looking for grepWin on your favorite search engine you probably find https://grepwin.com as one of the first results. Even though it seems to describe the tool the site looks suspicious to me as it does not mention Stefan Kueng and offers a old version to download.
When searching for the given contact one will find tons of sites for small tools that may be just generated.

I tried to check the downloadable version and compare it with the one here from github and it did seem to have the same checksum:

ddf70102357034e88e6f8e4fc7b81134f925100919e73f746291a22663e79b2a  grepWin-2.1.5-x64.msi

but that does not necessarily to stay that way, right? Or did I misinterpret it and you are maybe related to that site?

[stefankueng]

I never heard of grepwin.com until now. But I can not prevent other people from getting domains and set up websites.

To ensure the downloads are proper, you can check the digital signature in windows explorer (right-click on the file, select "properties"). Msi installer and exe (in case of the portable version) are digitally signed:

[dgeissl]

Fortunately the signature is also Ok, but as you're not the owner of that domain, they might aswell distribute malicious artifacts in the future.

Anyways thank you, for the quick response. Maybe putting a warning about that site not being the official somewhere in your docs is possible, but I see it's questionable if that helps anyone.

[jawz101]

I googled the gmail account & phone number at the bottom of that site and it looks like they make a bunch of sites like this -hawking someone else's software as their own.