home

MSExcel2k7.exe

SECDMSO2007

ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Publisher:
Grupo Educare S.A. de C.V.  (signed by ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV)

Product:
SECDMSO2007

Description:
Desarrollado por Grupo DILSA de San Luis, S.C.

Version:
6.00.0001

MD5:
67ac8515088488d0c76c9c408d944e49

SHA-1:
f08a12c878982dd6c80f02dc525a79df1de30827

SHA-256:
4d131c99d71414d107488a681c6958ee98af09542d2a91aa5a85ab752ca0faac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 6:45:58 AM UTC  (today)

File size:
6 MB (6,245,112 bytes)

Product version:
6.00.0001

Copyright:
Grupo Educare S.A. de C.V.2012

Trademarks:
Grupo Educare S.A. de C.V.

Original file name:
MSExcel2k7.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\Program Files\accithia learning 2007\simulador accithia learning 2007\msexcel2k7.exe

Digital Signature
Signed by:
ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Authority:
GoDaddy.com, Inc.

Valid from:
4/17/2012 4:11:53 PM

Valid to:
4/17/2015 4:11:53 PM

Subject:
CN=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, OU=INVESTIGACIÓN Y DESARROLLO, O=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, L=PUEBLA, S=PUEBLA, C=MX

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2AFCEDDA2962BB

File PE Metadata
Compilation timestamp:
10/29/2012 4:49:10 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:K3nsX+my9mPQ0YAbPvwOnvn0N18LfLriNd:wsX5y9mPQ0YAbP4Onv4if3iNd

Entry address:
0x6AA0

Entry point:
68, E0, 0E, 44, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, CF, 6B, 06, 47, DB, E3, 36, 4D, AE, DB, A4, 6B, 54, 44, CF, 69, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 38, 39, 33, 44, 2D, 4D, 53, 45, 78, 63, 65, 6C, 32, 6B, 37, 00, 38, 7D, 23, 31, 2E, 00, 00, 00, 00, FF, CC, 31, 00, 06, F0, 84, 3A, DD, E5, 1A, EB, 4C, 90, FD, 83, 4A, E6, 17, D7, 3C, 8B, 7C, D9, 4D, 18, 16, FD, 49, A1, 27, 36, CF, FD, B8, F0, 8C, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.3121

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.7 MB (2,867,200 bytes)

The file MSExcel2k7.exe has been seen being distributed by the following URL.

https://doc-04-5k-docs.googleusercontent.com/docs/securesc/7fhlrt3gibqtnnfpsgmvrcbd87s7t5eh/apedk00539rh9moanqur3q59vhbs0afl/1416693600000/01043915587186912437/.../0B7rMIGoDLqFGbTNrUFYwcmU3Vjg?e=download&nonce=ebqteo0oh6d6a&user=02981437743979277491&hash=m8minu72l3q3u4c30f9n5b6kiv9qvj4t

Scan MSExcel2k7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.