home

excel 2013.exe

Microsoft Office 2013

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from dc677.4shared.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Microsoft Office 2013

Description:
Microsoft Excel

Version:
15.0.4420.1017

MD5:
2f579d0f294571a9bfaa35724fe42752

SHA-1:
0f3fbaeadeffd8bcd6b9bf74758377ec074aac24

SHA-256:
38c01bccc28e8ad9a1b7f368bbf05d288f09d897b819d850b888cc525d0c1ca0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:55:24 PM UTC  (today)

File size:
2.7 MB (2,850,419 bytes)

Product version:
15.0.4420.1017

Original file name:
Excel.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\office15portable\excel 2013.exe

File PE Metadata
Compilation timestamp:
9/29/2012 7:40:22 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
6144:E2fNVbg0GCEc6ecCvz9fOpaATmCnSsL3h:E2faoATrrh

Entry address:
0x154C

Entry point:
9C, 60, 68, 53, 74, 41, 6C, 68, 54, 68, 49, 6E, E8, 00, 00, 00, 00, 58, BB, 5D, 15, 00, 00, 2B, C3, 50, 68, 00, 00, BF, 79, 68, 00, 3C, 00, 00, 68, 48, 01, 00, 00, E8, 33, FC, FF, FF, E9, AB, FC, FF, FF, 55, 8B, EC, 83, EC, 10, 53, 56, 57, 8B, 7D, 08, 8B, 47, 3C, 8D, 5C, 38, 78, 8B, 03, 85, C0, 0F, 84, 92, 00, 00, 00, 83, 7B, 04, 28, 0F, 82, 88, 00, 00, 00, 8D, 34, 38, 8B, 4E, 18, 85, C9, 74, 7E, 8B, 56, 20, 3B, D0, 72, 77, 8D, 14, 8A, 8B, 4B, 04, 03, C8, 3B, CA, 72, 6B, 8B, 46, 20, 83, 65, 08, 00, 03, C7...
 
[+]

Code size:
12 KB (12,288 bytes)

The file excel 2013.exe has been seen being distributed by the following 4 URLs.

http://dc677.4shared.com/download/.../Excel_2013.exe

http://dc685.4shared.com/download/.../Excel_2013.exe

http://dc645.4shared.com/download/.../Excel_2013.exe

http://dc617.4shared.com/download/.../Excel_2013.exe

Scan excel 2013.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.