home

setup.x86.en-us_o365homepremretail_697c5a5d-37ca-4707-b845-5f7fda04a26a_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4727.1001

MD5:
fd10eafee6a099d577244b4d8f1ba141

SHA-1:
271cda8af8976605ec9a36a73bc853f843d232b9

SHA-256:
e3d60e00251c0872c133cd8a78273be49be42997f68532596448662d368b3c06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 2:48:44 PM UTC  (today)

File size:
1 MB (1,094,840 bytes)

Product version:
15.0.4727.1001

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_697c5a5d-37ca-4707-b845-5f7fda04a26a_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 12:42:45 PM

Valid to:
9/4/2016 12:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
5/19/2015 4:05:21 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:Fh0pEn37KolXlKxTSVFoY+glBXlxL8bS5BLSOMxCvr+yoaAcb:Fh0pEn3GK7j+glJ4boFMCiyoaAcb

Entry address:
0x5F2A9

Entry point:
E8, 8B, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 99, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, CC, 12, 40, 00, 57, FF, 35, 68, 73, 4E, 00, FF, D6, FF, 35, 64, 73, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, B5, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 43, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1743

Code size:
879 KB (900,096 bytes)

The file setup.x86.en-us_o365homepremretail_697c5a5d-37ca-4707-b845-5f7fda04a26a_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=da6cbe4b-1435-45d3-99e0-7daa27176dce&token=363379ce-9395-45a9-b6a9-6ddf4ae7db48&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e565b313-fed6-4911-9dec-8359c53566ea&token=d78207e0-c75d-4379-a47f-0db46521d37e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=3d1492fb-aba0-427e-8dc9-24107fdf5fa5&token=d02b8ec7-3579-42f8-9e8d-d154800e0081&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fe08fb0f-d229-4ece-b8df-f4f94f85c409&token=17bfec51-799e-415a-8f2d-bf859b3ebd84&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ed88e768-159b-4b88-83ce-71c064f1ce5c&token=7891028e-edfe-4e70-ae7d-c1bc531c440a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d73e873d-c225-4ba2-8776-12bf6f2ae985&token=8e93ed85-67f4-4c98-af72-788c2d370cfd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=943b5806-882a-49e4-8cc4-d64d6b6c61a4&token=d802a72c-1154-4d56-bed3-591e491e11ad&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=392dd620-88cf-450f-a449-e1b6a775bf6e&token=90dbb633-155d-4c99-b354-e9c787ef3466&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=259be44d-9f40-41f3-853f-2ea2659d2551&token=86fcc3dd-753a-47ad-badc-8b3367f34ca9&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=fa2bd428-2664-44d8-8b54-a84bfe38435b&token=63ba9991-672c-4d07-8633-117c390c092d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=f0e35de1-c04b-4307-86cf-48107d2eb23d&token=af334111-cd7a-48dd-9bb7-3b8add6563cc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1a887cb5-bb47-4fe7-b513-0be174608dea&token=f6a4108c-b3cc-4d9d-a42d-04a621d62417&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=bde7bd91-7705-4632-a8a6-1de4905c2d3d&token=69ca7d06-554b-4758-8519-7f9cd50ccb90&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=73cab916-d954-4da8-a996-f8b6ad8c79ce&token=f1d4b3ed-d674-4965-aab2-5703ed721575&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=2f21e90f-3715-43e4-849d-c4dda62dba0c&token=c96c448f-d916-454a-ad08-d7fcb206b4ec&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=78f0d0d7-65ea-4c25-99b7-afc70d6bbc93&token=f090810f-c6fe-488d-ac35-1d66b0e84d87&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0c4d029f-1e72-4ebd-8bc1-40b5da07061c&token=dfa203bb-e92b-4676-8690-d4679bf3d6e0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b1c0d267-6410-41c3-984f-2a70eaa426fe&token=4b9983b8-84ea-49dd-9c34-a38b90484574&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d90acead-2d6f-401d-8c22-2a1818a0606a&token=d41f8566-e9d0-480a-bf81-e3c512233136&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f649fe97-6cc1-4c54-81a5-003239d4034d&token=78d4f34b-3ce5-47cf-866a-b57a06ad3fe0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=b30f87b4-a9b6-42ab-a78f-db1d44da03fd&token=8f449552-0960-484a-8db5-d1720178d7c4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0df89ad6-0641-473e-870c-260783dc95f6&token=d0ac46ec-ea24-499b-a255-38be49f6557f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=5bf28162-66b9-45d0-8e83-cb5dca11520a&token=b9c643c3-8dc5-4350-ba3f-69e76f319203&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f1500688-d814-4011-8a46-84e03d8f02b8&token=81b0012b-8dfd-4e3f-98a0-22947d171d96&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=02bb3076-152b-4041-b9be-aff0c682d3a6&token=3f80af97-ab7f-4827-8942-9c76f991dba4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=181c6d3a-6e12-4bff-a3bb-b3568f4bd7df&token=e82ff4f8-52c7-47cf-8fa1-12fded43ef25&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=762bc502-7b6f-4984-b1b7-3d8725f62c2f&token=b9aa62a5-191a-4079-97d3-3e8be53a20cc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=316a8963-0eca-4431-8a7d-8c2c4ce203c2&token=da0398d0-b84d-42e1-b104-6c2dde57dbd5&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cda8592b-ed46-4bc8-b764-7fb78164d904&token=11d8a671-741b-44ad-adf5-8a2a38a87877&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=168d1ee5-420a-4375-825e-6ae4f48aecb6&token=e18f492c-75e0-4d49-894e-a9dc79c9d138&version=O15GA&source=O15OLSOMEX

Latest 30 of 907 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.