home

setup.x86.de-de_o365homepremretail_012b9535-ce81-49a3-a7c6-e7df4370c084_tx_db_.exe

Microsoft Office 2016

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from c2rsetup.officeapps.live.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.6925.1022

MD5:
e2d3aa8c29f271885d648b3188cfb34e

SHA-1:
23d222fbefce496bc58955cbbe266ee6077829fb

SHA-256:
35c49ee26108cbcae321355f75aed19a7a51412d481cbf78f83e8968608735ab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/5/2024 4:21:25 AM UTC  (today)

File size:
3.3 MB (3,486,400 bytes)

Product version:
16.0.6925.1022

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\setup.x86.de-de_o365homepremretail_012b9535-ce81-49a3-a7c6-e7df4370c084_tx_db_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 7:42:45 PM

Valid to:
9/4/2016 7:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
6/23/2016 12:42:20 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:qxYPaRgG9AQlv1dWi+gpscaFYYewIv2QnfbMvjjIXBcWcgaSb/qOu25emQqEq0ST:q0Qlv6vgwEqO9wC0S39OMjIGjDwY2swE

Entry address:
0x144EC3

Entry point:
E8, DA, 0D, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, 98, 72, 67, 00, F2, 0F, 85, 27, 04, 00, 00, F2, C3, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, 64, 12, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 80, 29, 68, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0...
 
[+]

Code size:
1.6 MB (1,715,200 bytes)

The file setup.x86.de-de_o365homepremretail_012b9535-ce81-49a3-a7c6-e7df4370c084_tx_db_.exe has been seen being distributed by the following 23 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=ea04b2ba-fe22-41a1-b980-f880f9577645&token=02440cb6-d840-4371-9b49-113865f871a8&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=b0a7be2c-cb53-4e52-8994-5df609f965eb&token=07082222-db72-4461-b14a-a679de57d9b9&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=87425e20-f105-43bd-81ef-bff2ad0b4cc4&token=007dd07f-fc84-4df3-b1cf-fb3b8bfae3fe&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=b9ec96dd-713c-4399-a161-9e5315966048&token=0dafb54d-aee1-493d-bcd1-a53f26301cd5&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=9ddc9850-bb3d-4266-b085-8d4a3b4b0a8a&token=0fb7c590-23e6-4138-b4c2-4575368d9ce6&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=80ec5d41-27da-40df-a2a2-9c2bc107d5bc&token=00e8e5e4-96d3-4dd3-a719-797b3725d0c8&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=3d0b2092-a7c2-4758-8aa7-4717efb4491d&token=0b22f8ff-379c-4c9b-9ba3-50e7b3f9a788&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=acc3e8cc-8337-4e70-822f-3788b328708b&token=0934c84a-9947-43fa-9cdb-9d05febfa352&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=c46288a4-0ffa-4e1f-87b4-2531575f3a79&token=08739ab2-f565-42a0-b22e-db43029a67d3&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=3a7ba418-0f1c-488c-a3cb-b3fbcd8edcdc&token=040a8265-d9db-40fd-932e-989965cf245f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=8622b9c7-59b4-4760-a3a9-a9ec1c42d556&token=00f2cc1f-c06d-4f0b-9462-7ccedc7dac16&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=84c0aa10-9b0d-44f4-a2ae-b0b5c924cc7c&token=0e601dac-eb68-404b-be79-c7c31b955c78&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=ac75fa43-c24f-4876-b5b3-f0e9ea6c160c&token=01bbae53-0c35-4048-a059-8ae9d4e129c3&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=d8a8fb70-0025-4b9d-9ba2-92a3db94f149&token=0a9c43ec-1bf5-4010-83b9-e7fba58ad45e&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=e8b964a4-b9ab-478a-b7b1-80a5d667a983&token=06268936-bd2f-416b-9f99-239460db02fa&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=c6a89d17-501a-4e9a-991e-80f284d9c037&token=0710ce19-7e02-4240-9c9a-2527eced9b2b&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=5922e5e3-cbc3-477b-8fbd-f22b1e07e026&token=02d86bdc-b857-4d4f-b6ba-8a25675cbb72&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=f0da02b7-77dc-4b44-9423-15249607ae5a&token=0f82799f-e4dd-4bd1-b7f6-120b3cdb8dbf&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=f64d85cb-c5c0-4973-bf77-3b1e3c76a6e6&token=00296393-4377-4e4c-bbcd-9c1af73021f1&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=8594d434-d790-4621-a316-a395425ae7a6&token=0aea68f1-95a2-4ed4-952a-1803f544d3d4&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=f719b5b6-32d0-46bb-a7c5-a397f6777a46&token=0ade47b6-f98d-4e25-a196-0224d83f0359&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=6e07c438-71dc-487e-b5b3-e0e04c319446&token=026cb1bf-f58d-48b2-8ca7-28be358f16e8&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=de-DE&TaxRegion=db&correlationId=33cbddd2-687f-4483-b24e-beaeb77a851e&token=012b9535-ce81-49a3-a7c6-e7df4370c084&version=O16GA&source=O15OLSOMEX

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.