home

simulador_word_2010v2_0_2.exe

SECDMSO2010

ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Publisher:
Grupo DILSA de San Luis, S.C.  (signed by ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV)

Product:
SECDMSO2010

Description:
Desarrollado por EDUIT LATAM S.A. de C.V.

Version:
2.00.0002

MD5:
7f29d3d1488587f461a2e96748cee7aa

SHA-1:
57f1371861f5c6a7215afffd71103709dac73080

SHA-256:
5ef8c6b0c5e7d302a3a1ad9d79886d5cbc3c26ca14465175c5b4e25b1abe3751

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:44:37 AM UTC  (today)

File size:
7.3 MB (7,617,760 bytes)

Product version:
2.00.0002

Copyright:
Grupo Grupo DILSA de San Luis, S.C. 2013

Trademarks:
Grupo DILSA de San Luis, S.C.

Original file name:
Simulador_Word_2010v2.0.2.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\downloads\simulador_word_2010v2_0_2.exe

Digital Signature
Signed by:
ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Authority:
GoDaddy.com, Inc.

Valid from:
4/17/2012 4:11:53 PM

Valid to:
4/17/2015 4:11:53 PM

Subject:
CN=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, OU=INVESTIGACIÓN Y DESARROLLO, O=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, L=PUEBLA, S=PUEBLA, C=MX

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2AFCEDDA2962BB

File PE Metadata
Compilation timestamp:
9/20/2013 3:06:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:+bwOFQ10p/NjfMDOkgZmNZ/4tzqhAZaQx6syb7bNDfiZlm0QiiD:RgQ10VNjkqJKZ/4tzqqt6p7bNDiWpiiD

Entry address:
0x4E30

Entry point:
68, 1C, DD, 42, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 48, 00, 00, 00, 00, 00, 00, 00, CB, 2F, 71, A0, E5, 28, 91, 41, 91, 3D, CB, A4, 75, FE, ED, 2F, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 53, 69, 6D, 75, 6C, 61, 64, 6F, 72, 5F, 57, 6F, 72, 64, 5F, 32, 30, 31, 30, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 05, C7, 7F, 7E, F8, B0, F1, 66, 41, 96, 06, 23, C7, EC, 60, A5, 31, 1D, DD, B6, D4, 9E, D4, 48, 44, 9A, 97, E3, D0, 01, 5F, 88, 90, 3A, 4F, AD...
 
[+]

Entropy:
6.4630

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
2.5 MB (2,605,056 bytes)

The file simulador_word_2010v2_0_2.exe has been seen being distributed by the following 3 URLs.

https://moodle.copol.edu.ec/mod/.../view.php?id=5888

https://mega.nz/temporary/.../05hx0IQb

https://doc-10-b8-docs.googleusercontent.com/docs/securesc/279v1n238bfc8g5fn4tfiefnsirl4oe8/4969dm74tb06qer37u3ggl3g9hs7tugp/1460131200000/11902037349849736164/.../0B9l4zi9pmZawQXFNZ0l2eTAxZ00?e=download

Scan simulador_word_2010v2_0_2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.