home

MSWord2k7.exe

SECDMSO2007

ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Publisher:
Grupo Educare S.A. de C.V.  (signed by ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV)

Product:
SECDMSO2007

Description:
Desarrollado por Grupo DILSA de San Luis, S.C.

Version:
6.00.0001

MD5:
4cc220ea57f988da428f8e29c60daa05

SHA-1:
08d3bbb3c8d604636d191cb857ca395dc9b1304c

SHA-256:
529bdd905c7c503374747ffc0c283f31f238be1c86417b61720333daeb159556

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/30/2024 6:42:29 PM UTC  (today)

File size:
7.4 MB (7,777,016 bytes)

Product version:
6.00.0001

Copyright:
Grupo Educare S.A. de C.V.2012

Trademarks:
Grupo Educare S.A. de C.V.

Original file name:
MSWord2k7.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\Program Files\accithia learning 2007\simulador accithia learning 2007\msword2k7.exe

Digital Signature
Signed by:
ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV

Authority:
GoDaddy.com, Inc.

Valid from:
4/17/2012 4:11:53 PM

Valid to:
4/17/2015 4:11:53 PM

Subject:
CN=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, OU=INVESTIGACIÓN Y DESARROLLO, O=ENTRENAMIENTO INFORMÁTICO AVANZADO SA DE CV, L=PUEBLA, S=PUEBLA, C=MX

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2AFCEDDA2962BB

File PE Metadata
Compilation timestamp:
10/29/2012 4:44:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:k9nsL+mSsmPc0ZmuX58xkuaSKAZrayARNDfiZlm0Qiiw:wsL5SsmPc0pX58xkuaSVXARNDiWpiiw

Entry address:
0x4E70

Entry point:
68, 78, F2, 43, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, C2, 1D, CC, 3F, DB, 57, 1E, 4A, A7, 41, 5C, DD, BF, 02, B1, 86, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4D, 53, 57, 6F, 72, 64, 32, 6B, 37, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, 06, FE, E5, 6B, FD, BF, 8E, 56, 43, 85, 6F, 0E, 5B, FC, 5D, 26, 48, FB, 0D, FA, E0, 3F, B6, 60, 42, 8D, FD, DB, C1, 02, 5D, 16, D8, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.4847

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
2.7 MB (2,834,432 bytes)

The file MSWord2k7.exe has been seen being distributed by the following 3 URLs.

https://mega.nz/temporary/.../h45lSDbJ

https://drive.google.com/uc?id=0B8tEGZq5Xt_rei1KUjgta0s4bTg&export=download

https://doc-0c-5k-docs.googleusercontent.com/docs/securesc/7fhlrt3gibqtnnfpsgmvrcbd87s7t5eh/ri9hfk1ej7sd72a98g7jspp48gvg5351/1416693600000/01043915587186912437/.../0B7rMIGoDLqFGXy1ZN2FyMi0wYTQ?e=download

Scan MSWord2k7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.