home

MSPowerPoint2k7.exe

SECDMSO2007

ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Publisher:
Grupo Educare S.A. de C.V.  (signed by ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV)

Product:
SECDMSO2007

Description:
Desarrollado por Grupo DILSA de San Luis, S.C.

Version:
6.00.0001

MD5:
facfd9a43075704731ea15cfc9c2da42

SHA-1:
df0923af1a54bfab87a2441c6be3c9ee889b0ab3

SHA-256:
34a50ced3d5d63df2cc89db96dafede1688c6ad2abbae51be2ddd764c77b5eb0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:49:58 PM UTC  (a few moments ago)

File size:
5.4 MB (5,659,384 bytes)

Product version:
6.00.0001

Copyright:
Grupo Educare S.A. de C.V.2012

Trademarks:
Grupo Educare S.A. de C.V.

Original file name:
MSPowerPoint2k7.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\Program Files\accithia learning 2007\simulador accithia learning 2007\mspowerpoint2k7.exe

Digital Signature
Signed by:
ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Authority:
GoDaddy.com, Inc.

Valid from:
4/17/2012 4:11:53 PM

Valid to:
4/17/2015 4:11:53 PM

Subject:
CN=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, OU=INVESTIGACIÓN Y DESARROLLO, O=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, L=PUEBLA, S=PUEBLA, C=MX

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2AFCEDDA2962BB

File PE Metadata
Compilation timestamp:
10/29/2012 4:47:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:Esnst+mS+mPY9hgABmeIDtI4hMhgYZ/MSqSNBgYOf:pst5S+mPY9hgQmeIDtI4yhgYZ/MSpNQ

Entry address:
0x3684

Entry point:
68, 54, DA, 43, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 0F, 66, 24, 1E, 9D, 5A, 1D, 4B, BF, 61, D0, D3, 21, 86, DC, E3, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 2D, 38, 37, 30, 30, 2D, 4D, 53, 50, 6F, 77, 65, 72, 50, 6F, 69, 6E, 74, 32, 6B, 37, 00, 00, 00, 00, 00, FF, CC, 31, 00, 06, 57, A0, E1, ED, 18, 75, 62, 43, 8A, 1A, C1, A8, B5, 5F, 8E, 72, 65, BD, EC, 48, ED, 05, 46, 46, A5, 13, B8, E9, F7, CB, 78, E1, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.7618

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.5 MB (2,629,632 bytes)

The file MSPowerPoint2k7.exe has been seen being distributed by the following 2 URLs.

https://drive.google.com/uc?id=0B8tEGZq5Xt_rRE1nQ1lMZFdyckU&export=download

https://doc-0o-5k-docs.googleusercontent.com/docs/securesc/7fhlrt3gibqtnnfpsgmvrcbd87s7t5eh/cec4b8qga7fa5lvcrf5m9anfec6nteug/1416693600000/01043915587186912437/.../0B7rMIGoDLqFGWGo2QTA0WEh6bU0?e=download

Scan MSPowerPoint2k7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.