home

setup.x86.en-us_o365homepremretail_612e57d7-5591-40ab-a52e-fb4e7dc1be12_tx_db_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4701.1000

MD5:
286fa55164dcd322ec5af7a36d6b9da8

SHA-1:
44ba073e5ce11e25b4a72f4a1db06cf598e8086e

SHA-256:
05b912389d90f7b42cd320b1c6a342450e065d125f9544d1a41679f321172a47

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/5/2024 9:44:59 PM UTC  (today)

File size:
1 MB (1,075,384 bytes)

Product version:
15.0.4701.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_612e57d7-5591-40ab-a52e-fb4e7dc1be12_tx_db_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 6:39:00 PM

Valid to:
7/22/2015 6:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
2/10/2015 7:53:54 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:ik4rkV47WyYBc64lwJ07H0c303F0dbTua1dyI5ugg:iXru4a5KPwc30V0QeTu/

Entry address:
0x5E4B2

Entry point:
E8, 82, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 52, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, CC, 12, 40, 00, 57, FF, 35, C8, 2E, 4E, 00, FF, D6, FF, 35, C4, 2E, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, AC, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 3A, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1792

Code size:
863 KB (883,712 bytes)

The file setup.x86.en-us_o365homepremretail_612e57d7-5591-40ab-a52e-fb4e7dc1be12_tx_db_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d0aa1b7-a631-4460-a64f-b1efaa68106a&token=0c7b2eb0-6b50-497c-89a9-09abbaa6c6de&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=33d3e7d6-f892-49c2-9aed-53301670083d&token=293552a6-bef8-4eab-8c25-60f6078738f7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c5e6b37f-b07e-4f84-a26f-c676e2263082&token=68c3b58b-3604-45ae-9b1d-5a0bc06e3a73&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=69640ed9-b1b8-4676-9751-bac97dd220ef&token=5bcb9538-311d-4d65-962f-2627f207db22&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=312cfeca-92dc-42ca-b0ef-4dd2358160d7&token=d535723d-2693-4d61-81fc-6e4a28135ca7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2ef761f7-2d63-43c7-b1b3-3264bf4e214e&token=dcfddba6-2b59-4a9c-bb1c-5b1de7a6bcf7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fcf719dd-f49e-4454-8c0f-a1d04fff7e42&token=becc1af8-a2ba-4fbc-81ed-331a42043c34&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=0e64b6cf-f1f8-4058-a572-277322f7d235&token=eababc79-1e28-4c38-a940-f321d43552b0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4251b379-6495-4811-a04d-0c5519f23478&token=8380a374-5ea3-4adc-bf61-f576aa0df1c5&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ecbf5721-c0e5-41c9-ab2d-d287cf68a1d8&token=c5618bd8-d108-45c7-9b14-04d686ee7b24&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=498cde84-80b9-464c-b894-03318168d2cd&token=eb7cd2d9-b127-4c48-9f5d-31c033b1c691&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=30f0ede2-9675-42eb-891f-7ea80e7ef1b8&token=ab1da389-37a7-4715-ae16-9d5ad68cb60a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e24d9054-567d-4b23-879e-cf6f3ab6dea8&token=303adbab-d303-4fe5-83bb-7ced66ea2955&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=942f7575-ecea-4ae0-8b95-378d84a6f825&token=845da0d8-6b1a-42dc-a69a-6bbee9f8e749&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ecc0633a-e6c9-4c9c-a068-66dabd0ae230&token=35bd9400-9cf4-4fd1-bdbb-6d38105dc178&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3aee6da3-34ad-4653-85fa-53796b53e273&token=8304d5f1-ae6c-46ef-ac5d-e638d1becc2d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=57b29925-72a3-4858-acf0-943ad29eccae&token=30a54093-7594-4000-bb39-faa8b1c48345&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=769862cd-4af5-4074-ad1a-0648927fcb4b&token=09e749f6-f29d-4a3c-b6b2-8f961f6eff45&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bca36910-3e63-4b5e-a558-beb626f8a05f&token=12729600-3ab7-40a4-b8ae-91b2591ee686&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bb911ccb-7ea6-4235-869d-264c9621955b&token=f91bc1bd-f022-4372-9351-b8ab73d0c0fe&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c501050f-c58f-4108-a3aa-7b45d2078110&token=3336d6b8-7ea9-464f-9811-5686f2c80706&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3ddf3cc5-1fd9-4431-9baf-439cc3a28f51&token=ba0fb5f5-90c0-4aa3-a181-cb6028984c13&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5c284e3e-fe2a-4211-8b07-0bc6fe0a4b91&token=152d7afb-f480-4a6b-9dbb-9a4c3471e16c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=39da0178-5497-4a3e-9213-da18315e5f06&token=08004a56-4d1f-4dfa-92aa-ab4337c1c363&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=649ac70a-3d84-4e0f-baa6-33d8ed7230a0&token=f03b8426-ccd9-469e-892b-b7beb9a39071&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=684ec135-877f-4464-bad1-f1a2a1bcd480&token=c35ecbff-bb46-4513-bea0-d6a48211612d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=a7af3289-3462-41bf-a7dc-dea1fe60f371&token=2a601cc3-8c01-4535-ad39-5c50265fccc0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4ca4daf7-65ea-40ec-9fef-a90d4ebbaf23&token=ef87a47d-520a-44ca-adb1-9f3bcd49fa35&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=055fc1a9-f042-4f10-b309-6eb5daa028dd&token=b46ac811-7373-4dbd-8474-bbac06d909a0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=60301b7a-c4b6-4de1-8aac-965c321b025f&token=2451460e-56f5-410d-94eb-790a3f901108&version=O15GA&source=O15OLSOMEX

Latest 30 of 1,128 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.