home

microsoft-office-2010.exe

LLC

The application microsoft-office-2010.exe by LLC has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
LLC   (signed and verified)

MD5:
0300b3d7d351c61e83a4988877b976a3

SHA-1:
75fb55f099c3813265537effdf62ce61be7f7609

SHA-256:
20184b5b45c1dcac02ea7a626c9b431bf8eaa07954e8bdd0dbdce53af508a2ab

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/15/2024 2:50:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Amonitize
17.3.11.8

File size:
3.1 MB (3,254,816 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\новая папка\microsoft-office-2010.exe

Digital Signature
Signed by:
LLC

Authority:
COMODO CA Limited

Valid from:
9/4/2015 4:00:00 AM

Valid to:
9/4/2016 3:59:59 AM

Subject:
CN="LLC ""SLOBODA PROYEKT""", OU=IT, O="LLC ""SLOBODA PROYEKT""", STREET="prosp MOSKOVSKIY, 144", L=Kharkiv, S=Kharkivska, PostalCode=61082, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00E491193F6531060F8FC69563B236D139

File PE Metadata
Compilation timestamp:
10/20/2012 12:59:51 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x33E70

Entry point:
55, 8B, EC, 81, EC, 94, 04, 00, 00, 8B, 45, A0, 03, 85, 04, FF, FF, FF, 2B, 85, 78, FF, FF, FF, 89, 45, EC, 0F, B7, 8D, 18, FF, FF, FF, 8B, 55, 80, 81, C2, 1C, 4E, 00, 00, 0B, CA, 0F, B7, 85, B4, FE, FF, FF, 0B, C8, 89, 8D, C0, FE, FF, FF, B8, B3, 0C, 00, 00, 2B, 45, BC, 88, 85, F7, FE, FF, FF, 0F, B6, 4D, AB, 8B, 55, 80, 8D, 84, 11, B5, E3, 00, 00, 0D, D8, 6B, 00, 00, 88, 45, 89, 8B, 4D, 84, 2B, 8D, 08, FF, FF, FF, 0B, 4D, D4, 66, 89, 4D, 90, 8B, 55, 98, 81, C2, 58, 6E, 00, 00, 0F, B7, 85, 68, FF, FF, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
319 KB (326,656 bytes)

Remove microsoft-office-2010.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.