home

Microsoft Toolkit.exe

Microsoft Toolkit

This is a setup program which is used to install the application. The file has been seen being downloaded from files.polsri.ac.id and multiple other hosts.
Product:
Microsoft Toolkit

Version:
2.5.0.0

MD5:
7f8a3114659a0adaa572f0e9e4255bfc

SHA-1:
5671c239b85ec01c33c4eb155caa0dfa6c57e509

SHA-256:
c533e6e7e596045ac2897508800016250798bc0f663f06c697ab9744cf0fc0c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:27:20 AM UTC  (today)

File size:
36.7 MB (38,431,744 bytes)

Product version:
2.5.0.0

Copyright:
CODYQX4

Original file name:
Microsoft Toolkit.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vmwarednd\5943a0bd\microsoft toolkit.exe

File PE Metadata
Compilation timestamp:
1/30/2014 7:47:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
786432:73JFddccYjQuqcDdJI14seJObcWOv320ErkJzpVutE3tc8sT7Sk654:tqBQuDBFseJmcJoejsPS/4

Entry address:
0x244CE6A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9883  (probably packed)

Code size:
36.3 MB (38,055,936 bytes)

The file Microsoft Toolkit.exe has been seen being distributed by the following 23 URLs.

http://files.polsri.ac.id/Software/Microsoft/Office/Office 2010/MOffice2010-x86-Feb2014/.../Microsoft Toolkit.exe

https://dl-web.dropbox.com/.../Microsoft Toolkit.exe

https://docs.google.com/uc?export=download&confirm=nFw2&id=0B7IVukcfMRhtSkpmakpxUlFBeUk

https://mega.nz/temporary/.../7Ip3TDoY

https://cld.pt/dl/download/9eaa5339-0e50-4d31-9f9f-79532e9f3618/Cenas/Microsoft.Office.Professional.Plus.2013.com.SP1.PT-PT.x86.x64.VL-WiNTeaM/WiNTeaM/.../Microsoft Toolkit.exe

http://dc780.4shared.com/download/.../Microsoft_Toolkit.exe

http://download1330.mediafire.com/he51c9fripeg/.../Microsoft Toolkit.exe

http://getwebb.org/d/HmpHUyUc/.../yPLUgf0M

https://docs.google.com/uc?export=download&confirm=mOYC&id=0B2uBhfS6vZWORlNNaUdBakxJLWs

http://s6092.chomikuj.pl/File.aspx?e=LEa7vhS2zTSaHawK7Mk4D6PLv521uUbKBUAK_4XHzL_dApWW34aV4Au5XjtOrO5xQsNjwuGAtSfNvUhaatbkNtj3x3JMrXXMgqDqsrKIzJ6dddzVODviYnVHtzJTp8bXkYuha7gS0v0P7TSXId3YuQ&pv=2

https://doc-08-84-docs.googleusercontent.com/docs/securesc/91blb9s26pdjb4sd76vksvvf2ppqgq1n/3ipetv8itl47k6orjadukhtp4k053i26/1456495200000/.../10400148711013407743/0BxSI4SHWza6-WXBleHdkUjhxaE0?e=download

http://s6092.chomikuj.pl/File.aspx?e=LEa7vhS2zTSaHawK7Mk4D6PLv521uUbKBUAK_4XHzL84HQm-NNoTy2QB_46rv21BubCLKS5P9oGXsmTglmjhd3uNARVyBqOBRd4DKAsCBHqcM7SA7eEJXgc08VKEbY0H3jjEw4fcrVtxh09vJIYeqw&pv=2

https://mega.nz/temporary/.../0h0hjCwK

http://download1330.mediafire.com/l4l5ualgkleg/.../Microsoft Toolkit.exe

http://download1360.mediafire.com/u91t3uomcvlg/.../Microsoft Toolkit.exe

https://mega.nz/temporary/.../eMAgSIJR

http://download1360.mediafire.com/sgsea2wuu3qg/.../Microsoft Toolkit.exe

https://remote.elogix-it.com/Remote/BuiltIns/.../download.ashx

http://s6092.chomikuj.pl/File.aspx?e=LEa7vhS2zTSaHawK7Mk4D5XjrD3RKqpyrGZFG_twV1TOcdRWP27kbrYSLnE5x7fQi5WdwddzauFcpDUcwuvMUgLn0OTHq89hHBf4llkD_lRZX8wY8X89jm4zMOVuaB5qx26zlUIEY-7vVDRkoLTd_w&pv=2

http://s6092.chomikuj.pl/File.aspx?e=LEa7vhS2zTSaHawK7Mk4D6PLv521uUbKBUAK_4XHzL_rUGqNX7ZNnmwDACa7Jh9UOAjO60SQPMAQKmY6UeK7ZtQjOZFCNzvAyos7Z3kogHTWbw_aPW1GKceLLgsaKmeJGu62dULRJf4ysPnpQugo9A&pv=2

https://dl.dropboxusercontent.com/s/.../Microsoft Toolkit.exe

http://download736.mediafire.com/d4jnhlc5op0g/.../Microsoft Toolkit 2.5.exe

http://fra-7m16-stor04.uploaded.net/.../c2875ec1-1b83-486f-8e0e-f71a840ad427

Scan Microsoft Toolkit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.