microsoft office 2010.exe

pueriliter I-XXVII admitto munero

Eilio Developments sl

This belongs to a Solimba product that may be bundled with additional PUPs or may be part of an ad-supported software program. The application microsoft office 2010.exe, “oculus mansuetus pertineo repetitio” by Eilio Developments sl has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Solimba DownloadMR installer. It uses the Solimba download manager to push adware offers during the download and setup process. Bundled adware includes search and shopping web browser toolbars.
Publisher:
opus magnopere concupiscentia honor  (signed by Eilio Developments sl)

Product:
pueriliter I-XXVII admitto munero

Description:
oculus mansuetus pertineo repetitio

Version:
38.70.34.46

MD5:
15363dd72dc87506aa80204a84e93eb2

SHA-1:
5e02da73b95577f63b894dfed00ab1b7cda17e3b

SHA-256:
6e7adff59fd44b5efe8f2f750da9ed4fe69906923bf463e177f7f2a0a24b0e84

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the Solimba installer to bundle adware offers.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/5/2024 2:40:26 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Solimba.EilioDevelopmentssl (M)
16.2.14.11

File size:
538.1 KB (550,984 bytes)

Product version:
25.42.86.70

Copyright:
Copyright patior privatus studio inscribo

File type:
Executable application (Win32 EXE)

Bundler/Installer:
Solimba DownloadMR

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\microsoft office 2010.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
7/28/2014 9:17:10 AM

Valid to:
7/28/2016 9:17:10 AM

Subject:
CN=Eilio Developments sl, O=Eilio Developments sl, L=Barcelona, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11218832573D4BDD488A310AF2AC15B41F25

File PE Metadata
Compilation timestamp:
10/2/2014 8:17:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:9qraAs+GT21T4a7DZa88EvRVW9M/P19JIC6n3:9qrLGTBa7Fa8T1PRIj

Entry address:
0xDFDC

Entry point:
E8, AC, 6C, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 28, 6E, 42, 00, E8, FE, 15, 00, 00, E8, 7D, 6E, 00, 00, 0F, B7, F0, 6A, 02, E8, 3F, 6C, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 08, 65, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
114 KB (116,736 bytes)

The file microsoft office 2010.exe has been seen being distributed by the following URL.

Remove microsoft office 2010.exe - Powered by Reason Core Security