home

excelviewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.6320.5000

MD5:
6bd80f79ef70112533f95187bd78fafe

SHA-1:
afd50f7c95d477befe3850cae9d314efed20f0ba

SHA-256:
9808e621af0224dac83a3b2e5784070962117d72240ed087a08771d0abf56471

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 11:23:09 PM UTC  (a few moments ago)

File size:
51.2 MB (53,637,672 bytes)

Product version:
12.0.6320.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
6/18/2008 9:16:29 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:aM0BEjOT2I8yUd2XXp4y7CMEzG/FPCHJVAjoKefc8YEmKbNFV:aM0PIda44kHJKjovfc8YErbHV

Entry address:
0x566FE

Entry point:
E8, 1E, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 90, B9, 00, 30, E8, A1, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, E2, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
511.5 KB (523,776 bytes)

The file excelviewer.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1475848943&Signature=HMhsEJHwyP1xfJ4W6o1QgP4~LDn1y6V4d4Ra2q4J-N9d4s56cioEhEx2Ho5orzzAYu0DVxHjeWVnCUmjMY9nvo2l0D6hBzxPcSibplw-4KmHmseyFbrxWsqMMjqKVJ6mHJ5kX86GRjnXVZ4LryopY6PgqsUfV6coiRfSAThvHis_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_en&type=PROGRAM&Expires=1476147228&Signature=We0eO-0VAj3AfFV3P3KH2~UDnWcO1nuRS7xVypOe2WnBXvu3FImc6lokIWlYFOMFl37F4JvK6iH9C~It7bS2wsQOJXKRaFEL0Widym0oIJeDbbNeCXhDzXhPdhSfayj2Iyzp7rmwUNJyL~0BiyuW2tpdgNS06Wp3jW9VVcQyGng_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

https://microsoft-excel-viewer.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKaLnqSllpc=

http://microsoft-excel-viewer.ar.softonic.com/start-download/.../508a06e0655fd051bd8e380ff8177690

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_en&type=PROGRAM&Expires=1460980605&Signature=WMxaSo7JYnwgxBd6JVWHD-GROgXoZnL4-F0rH8lTq6iK9wlBbCr5yVIz5omD9-8rqkeSTo1LFoWLTCfCnloBU0y-Zp~rK7RvvLvxJUSA0pl1zd9ZRXjSofyqaXSvET~fG-OOaaQ4gsen~yJxTBmNCg5uLEOVEh9hWwk0K7AqWwc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://dl3.vessoft.com/files2/m/microsoftoev_windows/12.0.6320.5000/.../ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1486362657&Signature=VmEWu~uqKoX~R0OuZvMk2MciqrS2XsGOYYpz-SKNJzBfINp34xgKIA0uarTqOPxGkjW92A4psbnnbO4-Bm4kB8mWUxYNuhasn6dZNzy5xCAD4022k9RhAHrzewYq-tySN4vHPHI8SsoRV6Jhh2MKXm6BmSA9kpBZds-u4R5~HEA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1477304740&Signature=iAxpHAJsn1QhjHDLEklL9iexv7jTkVDZTWB9pwhqTIDaBGeWJuDx27wEmuyoMHE6u5xQtNrzfnxImCNpXjJKeAyhaGJ80I1b3J4a2axzN5DIAxClBlqaWJFsdEbd60EVWN-76WZ8CIUnFov6m1~qT79FVwHKRIy4xba9LQNiOkg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://microsoft-excel-viewer.tr.softonic.com/start-download/.../ba8749bb82df150d30fab23b64fd9a05

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1477403571&Signature=OpkJaNyyCsWr3hFdVlf08sT9Gdbyx-6takvscbgIHJZz4TWLpKCOOCERlyxTQysG0EbpW0Gkavi1FVzJUQXiVZpFzKGrDOwjWYe7jHWDLAJbde6ny5TpokloYwnwRYWUQILyG3ek0DcJmk3G1jNFatVY~q12ynxmMSwfyE2AzW8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1487573158&Signature=QEwb5IXQtmyP9AXXBlXfPxwS3tNq05IxEA2VT-2Nn7oA2MonWUu4Kdmfqo8nACYX8LvluhoY1cMX2khu-jMffhLGHH0Cdyd4y0imean4z~esLq5-355fMKbrlgotbbXT6IK6LdclT7YSzFDM-P1BeXI34Jn8APe3-22fpcaiaas_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1463065345&Signature=DdI-RKNvxcoBhnkYeEN-l8QbvebttOuYdIDCVWTYBQoapArHFcrBj1YyFAynYfz9BYfp8UC4mouVX37lFr6Ie796GrHg7EkTmauzondTgwX66dVYluiPu8~t-tRW3QtQ~urGGWeE4PSq2xjOMoDHprK8tb0PZHpwkwn2-1K7C4Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1481152958&Signature=dvwb90nCDz3-ynQYq0dIgxPrADv50ailquCPPcSDQDVWrYP6Qe0gscGzgN2OlSKiT9VsYyVMU4tZ8sNC6ZROiPnNlKCjh-CSqxWKx0dXDgZpAgRpY2k60iZ57hp1ocwQpS3MhZI1xn6dv-bpbFQ9DqIXeD4e61X6MuCGBTgQQBk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1483143515&Signature=Q3~iZan4lBKcIdLqiijB7W45HC4KIlolxRzAK0ugE~skfYdGX71mEsdGbC1AneinboEKGoNuFP7olaS4IT3z-cTb62XCRlPCDwsoVk-L6zKHbWTppcKBJkE175zw0h38PocYuAz8KhnEUcTxDUOVbf6SdLDavZWgy7NIpsACKHI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1468189164&Signature=Pu1cmlgrcLeTAuFnUb2eUeZOSlhAR98qpB~DWYbja~zrNRC5an6oVRq7JbBl5sd7HN1kaNCMRK~6rfDbJzGbfsJ0u4QoKsnHqoJdin6OH~0uOSZn1zN8cfshqubcPSGYhs9Gntf1ahZuJcUBeZGfUKS-ErOb9pSmCbo6dMY9WjU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1449021804&Signature=Gi2KOytkY~f1anndapP-ETWko99Z8Qu5E3RXDB9aD8NmMXbH2rFawU0hVB7so8bbVcGKGmKLO41UhsuPbEb-S2Ey6DCoud19AZsSi9Tk6G4X9oNCn-XhINPDPeTJF309R-eh2u9JaCZPvJUXosOtuB2Y7jFc1Or3hBYD1Lt754Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1482122446&Signature=gvfLsEamv~ss1~KFZLeVuxUl--Hgvf0VTPKATz3cqL2SpRVsPr7qAYrMjkFp~xhP4okzmG~oRUVsu2Pg0w2zHhA3ToiztTlcWH4jP9B9tMQoPEOwLIb-WqmnwaaqrrKzqxhHFRUy~TDTiXjdC4TxXtxcfZeN9mUj6PVuFEPel-0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://microsoft-excel-viewer.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6SHpZ-kmpo=

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1480386877&Signature=UK65va5EEBUou~hxkRCnRr2VQz73VH3zqfvZgMTH6US6THMv0aODXGZTy7uC2Lcs398okHZzDkWUKs-OU4NpNfk9vKUYfUxdCDrS3RvHsojkjo6o6A25RtAnMj94pR-vZh4YXmE3qtM6APB1YuJIOBLAdU~6WHL8wQIfN96Adp0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1482992768&Signature=YTJO8p7b0xU~GEtlSx2VPX5gRgV7Wli8ocXgb-4Oq7RvD4Tm06KNBvg~Bk3wgW0p4jiz8tpCHPeqiDG77h3dlpWx5E2PmQ-E1VTfVQ9CMdzwLtByGeobRp2B4HaOcEsdcEecVpw9aN43oeB0sfILtkoGFSsXgabThzuXPXdy27c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://microsoft-excel-viewer.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fm6ONoKWflZc=

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1486032651&Signature=PFHaL2jLWaB51WvFDvdfoBGvuiAc5NJY6XH0rec6Z4QeqicwTtOTNox64GmavhpqQqDlOVBZIM3nMwMZJ-15Bix3HN1unUTWgPkYsjMxlET1GggSP5lHIkZmeO7oD80KH9uEeZoBadbdJC3rF4w8sYhsAz6bMaw~hlRNgiMkCQU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1481815870&Signature=NPeXWxod2kCNLcG63FdVy7oV5pKX08rD9c997tF121nM9KIRFPU0ZcHUXLwhwqlNEe27PQgT9zyUwWgwTeeYY1RJAnU~oZOPHJR1-asW30x1nVUVspOC0phclJV3OTaFhDVLrKXHNL6blU3y~JhHoxasHUOErlwryQz5ZYkqAgA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_pl&type=PROGRAM&Expires=1446177511&Signature=hQw9OahOHUH1pWaUpzFlCDFw2Ein54RgRmIbeW2ijIScuHTJZFAlkl4iusMK3wcs2Qjm0ztnLjXBvmy-fhFPt00b-WDwE0FrTXkHSOtmUIk9txWaOtDLqgZz7JigejgQg7kazuNk456P9xCIXopL6hsYO6AUuyZ3OUhczvsA~J8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1484788961&Signature=Nq3Hw2r49FLxYm95~MM4LM4NOlQrl59unpzI9y4kJZkTvtaDantzSZG1TMgzr9-hWD~IQT5EZnm7tGlUTEoD7nHIWh5~PcHEEkEDgtqkHU5RNYRXnLN~S39rwYXYdroxO94~rWb~VKZOC~qqTuM6spZn-UPhzMDXYtBNZcSdZQM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_en&type=PROGRAM&Expires=1481916384&Signature=QHokoyPSNbv-KbWiGIJ~pjG5bHssYwtHk4vxyvEUhzXhq5dMcRJjFuLSEAs-p4TM3W9xeqXnfiHlwhINxHsbTdjFsXq4c01h5ZvFlBwMgw8pMz8t-pP39wedG0HFPinw63EvKfwfhiKcr84javh4oeEJICSCUYwZYGfy-ekANJE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1482536253&Signature=PDZ3yKSOwPNv0SacvWZW2zhSanQ-KidPKimZ0ReidmG1gqeGIvaMmYPY~s5xhbI0r0PZCN4GAuGkszmqKLDE0GsHIhVrVxGgMZje-ECBSuiU8oANK~CCkv2EgYOPQ3cS8XldydlUlSbQQDWB8kjLtaV1ghnwB6eya-exn-Ivbf0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1475830300&Signature=ckNA5bazBuVdAa4xq-UTLJWSUkbjKKQBACNPbu~phE4RH-ASEUwqjn5MdJ3PYetOAgMgBPzRRBmR81b5JqkZWyaCkI2s76Y6CUbN4i1vHgIH5fhGFGN3aYcBmfyOKlWTHylNi2oVw5comyMGVsbh-5pEva74Cz6pUhNwD9UOKxo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

http://gsf-cf.softonic.com/afd/50f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34328&instance=softonic_es&type=PROGRAM&Expires=1469766751&Signature=HG4eaK1fhGSYziVutac7Lxa~IFDEnCz~bwK3Rx3kO7ivpVgKZ5mMUM8fDiElvP0ytDjhbjnKu-hVHqFZ8wgE2JIDjt9~fv8Tnrku76wvq9t0AbUaVqMau8pq5xfY8MS6~Y0C41tj3lXsQZvl7fFhMtUuDkltRBfyD-Ip1olYOhU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ExcelViewer.exe

https://microsoft-excel-viewer.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGPo6GnlJw=

Latest 30 of 696 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.