home

ExcelViewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.4518.1071

MD5:
cb4f2202fc368af9476effed5cc7b8a4

SHA-1:
610cdc9a6684a5ef57ee5b4c1ca127384f3fb7e1

SHA-256:
4fc8e08237e8b458091c83dde68139e779fe401b4884d92d66ec843b5ca4a2ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/2/2024 1:39:57 PM UTC  (today)

File size:
74.1 MB (77,738,888 bytes)

Product version:
12.0.4518.1071

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\excelviewer.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/22/2007 8:23:13 PM

Valid to:
2/22/2009 7:33:13 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
12/7/2007 1:43:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:lcirrUCd5LJm1NX4PZkzKFdcx+svqZGP94boYSIxx:airrUCdnPZkzKF6+svoO9SoZI

Entry address:
0x5651C

Entry point:
E8, 1F, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 88, B9, 00, 30, E8, A2, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, E3, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
511 KB (523,264 bytes)

Scheduled Task
Task name:
{FE1D7DE1-5CB2-4291-ADBF-877E3501787A}

Trigger:
Registration (Runs on registration)


The file ExcelViewer.exe has been seen being distributed by the following 50 URLs.

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://s6749.chomikuj.pl/File.aspx?e=YN3NGsUz6zzLedpRa9QO1zUoUSEeQr5pQVxTg1mdwvi_ZyMlTzvAObfHRMlKdAKJvPmwb_I_aXzR9_vdsQ35nkimeXR4uWe0JZApvz9KtkSVcz6-hckIDyiV-mKrMhPEGkL0zQkVUiTnYvMnVr-fkw&pv=2

http://programki.net/download.php?id_p=356&id_url=3

http://www.tamindir.com/indir/MjAxNy0wMS0wNyAxNjowMDo0OA==/microsoft-excel-viewer/windows/.../

http://www.tamindir.com/indir/MjAxNy0wMi0wMyAwODowMTo0OA==/microsoft-excel-viewer/.../1

http://filehippo.com/download/file/.../

http://www.tamindir.com/indir/MjAxNy0wMi0wMSAyMjoyNDowOA==/microsoft-excel-viewer/windows/.../

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dwn/P7Eo8Fj52lQYsVjraXGahZoZDrP0IyVdrPfxbybFvZjgYOyJAEFuE5sBEjB67JvB6Bk8wdQZjK3Fpfd3jMHqJ6qJPEP9uX9W19EM7f0_9K3Om5MECO_-U_TYxIitvRhN/7QMswEwx6xppJFZVxtcWO9MmGma43U4iFauFfc9hekyuxo8MOLWIW2WcpfkbLHNcmiY0NFEOePYAa9-9enIO1bgUvxr_HHKrNga25Rkxk1QxA7DILHbXxuSfWUYDnNVD/TUJYZwYBLKQFUgOgI3htcPkd5qa2aXTMsHb-L8E-u73tm2i_fa_BZNvYbEHz6o7igxzBnQBnK2jmE8Bbg9KjrHCfasEGi2kUNJjquFC1mbMG_VwAs6ZrHi_hD4JV0AGV/.../

http://filehippo.com/download/file/.../

http://www.slunecnice.cz/sw/excel-viewer/stahnout/1315/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/es/download/file/.../

http://3rbup.com/de5d2910136523ee?pt=LQi3L1uV8gMjVpzxr7dyljQwOkudHJv2Y8In6YYffQE=

http://www.tamindir.com/indir/MjAxNi0wNy0xOCAxOToyNzowNw==/microsoft-excel-viewer/windows/.../

http://dw.uptodown.com/dwn/pXC6NpWvs9g5IZA9MGrGKKfWxWd_ryFjSovrSovCa0Iyg-FWpB-B8dtdMopLgaucdK1D6Qy96zk2skRlM-5_X1ibvvE6Cz7M1NUDgNygYbuUvzWtRM_YCbj6Ktf97BL0/xfewz8wD2WRBq4qCe9x57tBBb78b0PXW6sumR6xF6BnxcNCgzRCfDFrujbXZLMLu1hw-JvuFr_QaCwkrTnr9EH10dmnPfQSNA53HFVslMcckRsEB_3QFa9LPqdfG_PpT/P1TLFGwB_bhicvILnyO6Hs4q-9qzlwM2ikrEs05ts8ZLF-ZrTx_-qJhxuVULb1iUeXxuitjUVFUx77gRRp3qQbxVPCr_iRFDab6ji8GdgaC43vay43qlkj4R_XyUgUdj/.../

http://www.tamindir.com/indir/MjAxNi0xMi0yMCAxMjo1Njo0MA==/microsoft-excel-viewer/.../1

http://www.tamindir.com/indir/MjAxNi0xMi0yOSAyMzoyOToxOQ==/microsoft-excel-viewer/windows/.../

http://srwtck.com/get?key=b11e8793cade0a4fedc9f17323b20200&ref=http://seedynet.blogspot.com/2014/04/2007-download-microsoft-excel-2007.html&uid=81754742&out=http://download.microsoft.com/download/e/a/9/.../ExcelViewer.exe

http://www.tamindir.com/indir/MjAxNy0wMi0xNCAxMzozOToxNA==/microsoft-excel-viewer/windows/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehorse.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.tamindir.com/indir/MjAxNi0wMS0wMyAxMTo0MzowMA==/microsoft-excel-viewer/windows/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.tamindir.com/indir/MjAxNy0wMS0xMyAxMzowNzoxOQ==/microsoft-excel-viewer/windows/.../

Latest 30 of 1,042 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.