home

Office 2010 Toolkit.exe

Office 2010 Toolkit

The executable Office 2010 Toolkit.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from e.mail.ru and multiple other hosts.
Product:
Office 2010 Toolkit

Version:
2.0.0.0

MD5:
a83be61814daac34542680f84448edb5

SHA-1:
56e4531e58a508b45c43a813dc4da578db231886

SHA-256:
a5a5e3c8319c187fc75e9b1893ed30103d4b139435f015913a25aaae6abf5722

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/25/2024 1:57:31 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Unnamed.Threat.14
14.3.20.10

File size:
15.2 MB (15,895,552 bytes)

Product version:
2.0.0.0

Copyright:
CODYQX4 & Bosh

Original file name:
Office 2010 Toolkit.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
12/7/2010 11:03:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:QW8rJ52GKwhWpKMglhWpbpe0A7NC4952GfSX1UFqQmNeLa1o3kYQHjOCAJ/Lsb6p:QW8hjyN2UxAJDh3F

Entry address:
0xECF3EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 70, 00, 00, 80, 10, 00, 00, 00, 88, 00, 00, 80, 18, 00, 00, 00, A0, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 06, 00, 02, 00, 00, 00, B8, 00, 00, 80, 03, 00, 00, 00, D0, 00, 00, 80, 04, 00, 00, 00, E8, 00, 00, 80, 05, 00, 00, 00, 00, 01, 00, 80, 06, 00, 00, 00, 18, 01, 00, 80, 07, 00, 00, 00, 30, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
14.8 MB (15,520,768 bytes)

The file Office 2010 Toolkit.exe has been seen being distributed by the following 18 URLs.

https://e.mail.ru/cgi-bin/.../octet-stream&cn=Office 2010 Toolkit 2.0.1.exe&cte=binary&notype=1&file=Office 2010 Toolkit 2.0.1.exe&mode=attachment&channel

http://download2138.mediafire.com/a3h87yhjiwmg/.../Aktywator Office 2010 Toolkit 2.0.1.exe

http://www.americandan.com/programs/Microsoft? Office Pro 2010 With Toolkit and EZ-Activator 2.01 [h33t.com] Full/.../Office 2010 Toolkit.exe

http://dosya.co/.../Office_2010_Toolkit_2.0.1.exe.html

https://dl-web.dropbox.com/get/office/.../Office 2010 Toolkit.exe

https://docs.google.com/uc?authuser=0&id=0B33EFm41yWyUUnp2V2NMeW1NUUk&export=download

ftp://siva.banki.hu/home/peter/_!_SegA©dprogramok/.../Office_2010_Toolkit_2.0.1.exe

ftp://172.16.66.5/QuanTriMang/PhanMemPVTH/OFFICEENT 2010/.../Office 2010 Toolkit.exe

ftp://192.168.2.250/YEDEK PROGRAMLAR/OFFICE2010/.../Office 2010 Toolkit.exe

https://doc-0s-b4-docs.googleusercontent.com/docs/securesc/o88hscm1qhmbcpl7l0hjf273d57rri9s/e9jvk6tfvmfc4m2dc6r1d8mj4ij40pah/1468944000000/.../11221766728460799888/0B0y_ef7ld01BZnoxTGFyYVVmQnc?e=download

http://s10413.chomikuj.pl/File.aspx?e=rMt9DQvGXioLsRxVuYraQ8gR57ghS-S_wXQKQuBzSzypATPGbh_Pb1-ELP47O5Yno0g_qf4eNCEd3qlT9Yz7XE9OueZIRRKMKU3RItB3MEJ00uDy44tQQhZkk5kFvlI9JpA_2Dk0h7h9T_UD-7hgKumyvF_kLG1HDTuI1sewHIXP20bAXDXqbIBggdSfVJDW&pv=2

http://download636.mediafire.com/mg4xl235vmlg/.../Aktywator Office 2010 Toolkit 2.0.1.exe

http://startpoint.tk/soft/.../Office 2010 Toolkit.exe

https://doc-04-9c-docs.googleusercontent.com/docs/securesc/sf8pkk8c9rnd0g9fomis3aae44dj2sgj/vdgp8v3tkk2u50ois0adtmbaegqg6qrv/1434628800000/.../13753664021837705905/0B97_NWU-hUAZR0FtUXN5Vlo3WTQ?e=download

http://u.mail.tlen.pl/?cmd=getpart&link=L01vhw01kAnxtTx26kSAtPzbaPzNwO2OtLTPweTORhWaZjSMeP3OxPTPsNzNVNTO2c2OtPTPsNzNVNDOoM2OtLzcaOTM2bTM6NDMJ8jNZjSMs8CMslw02Z6CGw5wAikEApHHdBdXYYLiclzmZQF2YV6jMkNCMlV2bjI2aBaDIsKCMeNmLUeQZk

http://www.filedropper.com/.../filedownload.php?id=office2010toolkit

https://drive.google.com/uc?id=0B7DM5XO7TZcERHdqUnpacTFkd2c&export=download

http://online.b1.org/rest/online/download/.../Office 2010 Toolkit.exe

Remove Office 2010 Toolkit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.