home

setup.x86.en-us_o365proplusretail_339a5d86-8f62-48c3-b2ac-b9cc0582228f_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4675.1003

MD5:
1f568b3c0be398e5bbd4d7534f7c26ed

SHA-1:
638fd01420aa5a443b8d835dbf91431a3718311c

SHA-256:
4d7257e73e30698e3942ab87126c6c648d50b46395275ce677f7a35934838077

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 11:16:42 PM UTC  (a few moments ago)

File size:
1 MB (1,060,536 bytes)

Product version:
15.0.4675.1003

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\cm7o57v8\setup.x86.en-us_o365proplusretail_339a5d86-8f62-48c3-b2ac-b9cc0582228f_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 1:39:00 PM

Valid to:
7/22/2015 1:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
12/12/2014 9:26:00 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:k6KYdlXxd3GQBc+kArf9OJoPVeacUAMoy+peYSlWCe1/j0qm0EqhB:k6KYdZTvcIVtPVeZUA94Te5BbhB

Entry address:
0x5E10C

Entry point:
E8, 22, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 58, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, A4, 11, 40, 00, 57, FF, 35, C8, FD, 4D, 00, FF, D6, FF, 35, C4, FD, 4D, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 4C, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, DA, 53, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1670

Code size:
849.5 KB (869,888 bytes)

The file setup.x86.en-us_o365proplusretail_339a5d86-8f62-48c3-b2ac-b9cc0582228f_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f2df5808-f0e5-4276-aaf3-91964581351a&token=88f4672c-5b89-4b02-8be0-37e79870abae&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3b55fb80-bea2-46a5-897f-d2c52ea4b629&token=0976b4e3-79aa-4790-abe4-833267dff9a9&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=5a516bfc-0898-4766-a164-f8a92b754cd0&token=da8af8c5-bd38-4e99-95ee-a76754199cec&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=3a05828b-e3f7-447a-88cb-aad9e859d159&token=39688ca8-62aa-4ef7-884c-8c2b3d0f933b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=607693c3-853f-45aa-b54e-e68f72c328a3&token=b12bd942-0ffc-44a1-b838-6a703a77c241&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b915ccbd-cb04-46dc-9278-7211010c9aa7&token=14881db3-1cb7-445c-aff1-6288f5f344dd&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=89030121-647c-4a2b-ba3b-24564852cab6&token=d3555c4f-aa03-4e7a-bc22-c5ca6f7d2642&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b874a491-32e1-4bd7-938e-2beb028b053d&token=5924087a-1a9d-4137-af0c-4f4bfafc3a6e&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6955adbb-91b8-4370-aa06-fe20a57ff89b&token=d67ec490-d4db-4d50-a547-bac5d9a246d2&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=bddc799c-a63c-43d6-b883-6c54dfbcc8b2&token=cea22546-d355-4e16-a299-215acf1b5ce3&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b02b219d-869d-41c7-86f5-7c52489388f7&token=b490c651-49bf-41ec-af23-c6ee2dbac4c6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=db55b299-f1b2-4fcc-8dcb-4c50d837bcc4&token=dd2b232d-f367-4856-8ac8-f30b423a7140&version=O15GA&source=O15OLSO365

https://doc-14-48-docs.googleusercontent.com/docs/securesc/jv4nbs942rtom9v82jrcoi75qbsk7uks/ufsm0eq68ff79atjmbsmhdrhocjt1mi8/1455343200000/.../14766247657530092152/0B5ete2Neuk9bTkVKZUhGM05ZVFE?h=03148939628023926219&e=download

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=749b528f-d700-4031-870c-3bbb345ed329&token=51864384-fbf5-49a1-aef2-aec26bb29f0a&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9875b5b0-187d-4aea-b3c0-6ed1f53c0f21&token=cf8c1e3d-82dd-4423-9a82-b261525b56df&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=613bef94-96ff-42c9-a604-c7b6ef3c1479&token=2afdf8e4-d8ef-40f9-ac96-1a150fe6308d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=a7ff7b08-e546-4ac8-9d53-a776c64ea4c7&token=1722e94c-6c79-4fc8-8776-3f725c936ff7&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f6c9641c-a5c2-43cc-9566-43cb3364ccb1&token=7cc9f4fd-181d-4f4e-90c9-0d1f9dc6b966&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=8a9606ee-15d9-46e3-b0e0-9e3e55960dc5&token=b72e264e-aee8-4b5a-832b-48a131465cb0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=77d7f98e-ece1-4172-bc13-e692c1ea2862&token=b5269a60-fb71-4c56-8ff0-bf7c17c707a5&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=e5430734-85d7-45d8-9a7f-b9c702f92c2e&token=c0eb73cc-1e73-41a8-9936-43dec1c0d8b8&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=341bb084-794b-4a46-a3f0-f278e4a76be9&token=2940e65a-01e1-4f64-a2e9-f3d9646ffdb4&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=27dbb6a5-2a6e-4d8f-a523-1f4b770840ca&token=d8709360-d1fd-409d-b0dc-cc1c9d9e2234&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cf56b050-7fbd-48cf-91b8-a04b79f88b64&token=7f3bd918-e278-4b3c-a39c-31f6ad51bcb6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2f0e5b2d-1057-46a4-a3c8-cca89451ff55&token=048da7d5-680b-438a-b113-8d9ba92afd0c&version=O15GA&source=O15OLSO365&B=2

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=aa98a876-fa23-4768-a5db-b818ef27730d&token=4d36da19-3f83-4cb7-a5ac-42c029e2c16b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ae840be5-7f85-4289-b688-c27ca9578d67&token=853f6b95-7bb5-40a9-8fcd-cc74a0e34af5&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f2a69cd8-b4a7-48bb-a8f8-cb6b23f42a7c&token=00bcfc87-7f9f-4e08-9dc2-c17533e0c9a2&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=372a8fa9-9d8c-4013-a1ea-5eb408d21f96&token=3baeec95-d037-445f-ad29-d38a17a10b9b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=71517e6c-cc5b-4505-a196-7dadcc8dccea&token=fcc2994b-a88c-47da-93a7-499037e742fd&version=O15GA&source=O15OLSO365

Latest 30 of 495 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.