home

setup.x86.en-us_o365proplusretail_4dee0c46-4fd9-4cdd-8ca3-c00cf6366d4d_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4701.1000

MD5:
1ece761428938d42c164bc37621a8895

SHA-1:
94eef804d10b1817f23c8c9b0667a77890c9e789

SHA-256:
adb1fc1b062b121b7826e892c9f41bb96336d4d2f098a84ff49124210c487422

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 5:32:08 AM UTC  (today)

File size:
1 MB (1,075,376 bytes)

Product version:
15.0.4701.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\setup.x86.en-us_o365proplusretail_4dee0c46-4fd9-4cdd-8ca3-c00cf6366d4d_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 6:39:00 PM

Valid to:
7/22/2015 6:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
2/10/2015 7:53:54 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:ik4rkV47WyYBc64lwJ07H0c303F0dbTua1dyI5IYR:iXru4a5KPwc30V0QeTIO

Entry address:
0x5E4B2

Entry point:
E8, 82, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 52, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, CC, 12, 40, 00, 57, FF, 35, C8, 2E, 4E, 00, FF, D6, FF, 35, C4, 2E, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, AC, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 3A, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1792

Code size:
863 KB (883,712 bytes)

The file setup.x86.en-us_o365proplusretail_4dee0c46-4fd9-4cdd-8ca3-c00cf6366d4d_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b991cbe7-a8a7-4e9e-8112-b3b997819d14&token=5c37415c-1906-4322-b8b5-cefb3cfb02d9&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=bdbd1dbf-111c-495c-bb1e-e2ef03fc2b39&token=5debedff-e067-4fb4-a631-4f25864a818d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b1894e9c-c2c1-4066-8002-b11b27374cca&token=dc497f6f-6858-4222-a693-4fb7b11a0d18&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ffc0df56-aba5-4316-937e-511e1c6ed6d7&token=45154119-1881-480f-aae0-5f7b0f16ce2f&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=13b94266-6696-4556-94a2-2244f0923294&token=238e61d7-e426-4978-b1b5-bced13e6dfe5&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c8509e2b-1742-4343-8edc-d3b25b00a60e&token=8be55b68-2542-408b-a0bb-74572b6bf1ad&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7e08e45c-76e4-419e-93fb-573351b3fac2&token=0827deb4-b34f-47e8-bdf6-451f9cad7f97&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c7d31aec-3800-4a28-9423-bbdbe0625227&token=fcec4a6d-7c0d-467e-a052-798f2a7f2478&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e38576ce-d945-4774-88fc-21e2d9f5ea55&token=8508e036-0a38-407d-a9e7-4f537ebd7f4a&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=1844bde7-80ed-46d4-823f-9c172646ea6c&token=96291556-21b1-443b-a747-d137083df805&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7435db36-9ce7-4771-94c4-b7d92ac69c0f&token=6d9c994f-6e62-4fc9-94f8-69a9ebcd0e94&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=846f6110-a372-4965-ae5b-f2a43294c7f3&token=7d84ae84-216f-4b10-909b-2d80d6984a02&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3a16fe16-c670-4219-8019-3920cadec1cf&token=aacf09c4-e30b-45fc-a1d3-209efa150412&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d6c7149d-9064-4963-865d-4801d94b0c6a&token=2dd5021c-62f5-42ae-85d3-e9450fb8797b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=7d685dec-61b8-48e6-b99c-34b55689da29&token=1e82b172-0c76-4e65-a430-7a1a09703d3c&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d6fb91cd-14d3-4503-8bae-dad637958bcc&token=cbdd9b7d-15c4-4487-b018-460180a61e09&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=31630d21-4d3c-4298-b466-ecc23c0af50d&token=135053ae-4a24-44bf-aca4-42f0c9d0c4c5&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ec3207f9-b8d3-4c94-809e-eb3f5a9010c8&token=845eaecd-46d3-40b0-bf55-7b0d7d4aca28&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=ed0f83ba-3388-4b36-a336-e3002a79a406&token=0c3a2a26-b456-4469-b6d9-147ad9ac7abe&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=2a6f4766-c9f8-482a-8e4a-1f71863a561f&token=2dbc0458-b805-4d21-a5ff-c1399543e31e&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f6a8dbb9-75dc-4954-a594-21e79ec56607&token=ef8e6fc8-3f04-40ca-ad7b-9b7045f5b5ff&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=264e4e6e-8594-440f-b99f-823431fb7722&token=2c57910f-beb8-4b5d-9fa9-ce67dda566a6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c66499bb-bbe3-4075-8df3-0bcd09f5d5fa&token=7538039b-dff9-4472-8866-a1281f185ac5&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=e71b6f05-2f5e-4a20-807d-8a7e17780b3d&token=9fa42aed-22e6-4326-848a-4e5a85d0609d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=136d0c70-61ad-4d66-8db8-d4387c2c0c88&token=4b8d9ddb-7198-438f-9f37-56813f501f87&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=3c5bad17-4dd1-49b5-9304-9d8e850799e5&token=77cd3471-7fde-4ebe-b548-6148cb6f70b0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=4ef7d4d6-f73b-4449-b159-d94e1de4250f&token=5ea69a52-ddbb-4042-b0c2-9d15485701f4&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=3c99faa2-3ca4-48d3-972f-282327b5cb70&token=51f9bfa9-e251-4178-ae0f-b75518deaf45&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=85e1696c-7985-46da-aaee-0154062ff34d&token=f1e95c52-2e68-49c5-a02a-ab06503dbcff&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9bccda88-82ba-4c44-83ff-f3147448afa9&token=2778fc1c-52e9-4484-8f3a-41ba5f7f4d74&version=O15GA&source=O15OLSO365&B=0

Latest 30 of 370 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.