home

setup.x86.en-us_o365homepremretail_06ef9da5-b9b3-4b71-84e9-2d3d75d352f5_tx_pr_.exe

Microsoft Office 2016

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.6925.1022

MD5:
8e6572ba78196f28a16b86f2c4842186

SHA-1:
fcd6d7bc80aa02c7c8f843f64d553def3e579303

SHA-256:
fb83ff40a037ff4013d1f6a36c9de5cf1823e0d98d5e6136802f711f9e62baf2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 4:55:42 PM UTC  (today)

File size:
3.3 MB (3,482,312 bytes)

Product version:
16.0.6925.1022

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_06ef9da5-b9b3-4b71-84e9-2d3d75d352f5_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 1:42:45 PM

Valid to:
9/4/2016 1:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
6/23/2016 6:37:37 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:HxYPaRgG9AQlv1dWi+gpscaFYYewIv2QnfbMvjjIXBcWcgaSb/qOu25emQqEq0S+:H0Qlv6vgwEqO9wC0S39OMj2GjDwY2sr

Entry address:
0x144EC3

Entry point:
E8, DA, 0D, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, 98, 72, 67, 00, F2, 0F, 85, 27, 04, 00, 00, F2, C3, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, 64, 12, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 80, 29, 68, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0...
 
[+]

Entropy:
6.5815

Code size:
1.6 MB (1,715,200 bytes)

The file setup.x86.en-us_o365homepremretail_06ef9da5-b9b3-4b71-84e9-2d3d75d352f5_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=217d60fd-3f79-4a03-b1b7-2854ace2b763&token=08001416-c4d3-4f58-a77f-9a2f2dd47bd6&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=dacfe379-ae90-4cb3-8e1d-c5b9acb1a33b&token=0b410903-2551-4cdf-b60e-5f7820d03ac2&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d46ed26f-0d97-4a61-81dc-3e560a74d941&token=02d86983-ff2a-48ca-98d4-4bcd93bd09f3&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=86a33397-c79d-4088-ac51-9be184ae8ac5&token=0dee0c68-9c76-49f9-bd75-f58275f0d959&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=39581051-6ed9-4dce-b2f9-d034870ff632&token=022c4ca5-e87a-4959-9f65-7c30d0a84697&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7175dd7d-caa2-4a20-b171-623b2dbd014b&token=083d05be-21bb-4073-8b93-e9af675fbcee&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=4990f63c-ae06-493f-afb9-5c69e4e41c6b&token=027f7e48-baea-4b22-a676-4d3a26bf3b58&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=42fe4519-b0f8-4dc0-a5cb-81e1e6939226&token=0a2e0c65-7a68-4205-8c46-e9e038a6eb2c&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fdbde354-fa9b-48e0-b0a8-2685d4e0b1d7&token=0a6f8cd3-4c9c-4245-a401-0afcde4bef23&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=802a006d-dcc1-408f-a670-5f574a3a26d2&token=074c4b53-34ce-4c6d-8f13-c8af8cb472cf&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3dba488b-60a2-49af-bd29-b58e12af1e5c&token=0053c1e3-e5cd-4963-a97f-23852383a962&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=afcf686d-ab4e-47d8-a6a4-48893ee6214c&token=0b44fb15-7b0b-4cb1-a043-42d3cf7daafe&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=e68df008-1102-4350-835d-957dbce4f9c9&token=0c5781d6-819e-4e9a-bc8e-97c0ceaffa64&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=b580e743-ac8a-4079-abac-89ffea2c5ef9&token=0610c287-ad10-4c5c-94e0-f98123814ba6&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1ba44be0-a606-48bb-8692-5ddcb2bf92c2&token=091de84e-cba4-475f-b7e4-c35a462ecc69&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=68acfe1c-ddc9-451e-84d3-d1395198a902&token=03db7d87-3ce6-4620-8db4-11734b33425d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=564c2f7f-646e-49f9-bb91-26b8fcdcea06&token=02ee8480-f86e-4193-a816-35c124b9acd4&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bd010667-d12e-489b-b74a-a8820489aca8&token=0399701d-11d9-41b9-b12d-29dbb7280a63&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=422313d2-e27a-4411-8aca-e5487e38b966&token=02bee237-5650-422c-af01-3255cf81c6cf&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bde1ed4c-dde0-4ffb-880c-29936ff16da4&token=0656efc5-2952-4be9-8988-6a70f0021828&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=bda9eb42-4adc-4d5c-b0c1-24b2b2f57606&token=0dd7cf3a-e353-4c0c-aadc-7a26738f2f07&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=687fb2be-bd07-4d27-82a2-b3f946797ecf&token=027d5a0f-73b6-401c-ab1a-eac8bc453735&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=cc547a5f-f324-41a6-8e53-2a40d1b46991&token=07cc0737-1540-4d1f-aacb-e8d216ffea1d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=360bf4dc-7499-42fa-bc91-2776b556c25e&token=0df1e2e6-c2ae-4a7a-b654-1b14dffd467d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8cca8b8d-7e6a-4c7c-9201-e3fe1bca3855&token=0be1f8ae-64f3-4069-aec8-a01779e18544&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=da2327e1-2897-4f24-94c6-6e69032d82c2&token=0194b06d-142c-454d-8d95-f8e5262fab5a&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=39eb1188-f7f9-43f0-8338-56f176b43f3f&token=036cd001-d1ad-45ae-90ae-d6b21a380551&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=66eacc95-b59f-47ee-b347-322d6c1712c9&token=0edd3c03-8422-4eba-8892-0fbb741a4af3&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7d1d102b-4f25-4603-aec1-7eba545ab6fb&token=0a842a75-bfc7-4de2-9a78-89375cca332d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=813c5540-b347-4832-970f-89f1c527422d&token=0bb1ccd4-cb96-4839-9857-e3e82420c135&version=O16GA&source=O15OLSOMEX

Latest 30 of 511 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.