home

Office 2010 Toolkit.exe

Office 2010 Toolkit

Product:
Office 2010 Toolkit

Version:
2.1.6.0

MD5:
7062d34e81237fe861cf5d2fd910d30c

SHA-1:
2488ddebf18382d3fc4d149d79b8cab403d0d756

SHA-256:
be91cb5f08db8ae8b97199efdee4f33ec706bd64998c3bcc04879fa7a1ce12ec

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/19/2024 9:03:12 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clodbc6.Trojan
1.3.0.4613

Fortinet FortiGate
W32/Keygen.FU!tr
2/4/2014

Sophos
Troj/Keygen-FU
4.96

ViRobot
Backdoor.Win32.A.Hupigon.32459264
2011.4.7.4223

File size:
31 MB (32,495,104 bytes)

Product version:
2.1.6.0

Copyright:
CODYQX4 & Bosh

Original file name:
Office 2010 Toolkit.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\microsoft office\office12\office 2010 toolkit.exe

File PE Metadata
Compilation timestamp:
5/23/2011 2:22:29 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
393216:LBicMNQk9lhCOlF8ecgUv22AJDPUecfmJjO:IGanCAF8ex+HAx8Lu

Entry address:
0x1EA3D0E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.2227

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
30.6 MB (32,120,320 bytes)

The file Office 2010 Toolkit.exe has been seen being distributed by the following 14 URLs.

https://mega.nz/temporary/.../IBgGWQrA

https://mega.nz/persistent/.../DdsmFTJI

https://drive.google.com/a/.../uc?export=download&confirm=qDwa&id=0B2gx3vZ61aXUbE42d25tTFFJV0E

https://mega.nz/persistent/.../rV93Ea5Q

https://mega.nz/temporary/.../P10AVbTK

https://docs.google.com/uc?export=download&confirm=nf5f&id=0B6_dD9_JHc2TNG9Zc1RqTWZ6ZXM

http://www.domotec.cl/Office2010Toolkit.exe

https://docs.google.com/uc?export=download&confirm=kZZI&id=0B7P6sr9ysrJqNEJmN0l5OWg4OGs

https://mega.nz/temporary/.../IAQSgY4b

http://download.uphaha.com/.../downloadFile.aspx?pku=27D3AEFE6FF76GVMJHAJZK8AP3LHWK

https://mega.nz/temporary/.../rV93Ea5Q

https://doc-04-00-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/grigi4o9oehcqht1f4mgqnrp23fmn039/1412085600000/07108370691337196928/.../0Bzfa7Mw6nD7qWTJtdWNvc2ZWdkk?h=16653014193614665626&e=download

https://docs.google.com/uc?export=download&confirm=p2KS&id=0Bzfa7Mw6nD7qWTJtdWNvc2ZWdkk

https://dl.dropboxusercontent.com/u/.../Office 2010 Toolkit.exe

Scan Office 2010 Toolkit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.