home

setup.x86.en-us_o365proplusretail_cab6f8fe-9083-48d6-97c5-a707392b75f6_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4719.1000

MD5:
3d51d3600f6620777dc7754a94c19b42

SHA-1:
c21e709a24f572231a011528b5eb84937d6e3c8e

SHA-256:
073eba24a09187a8521031f673a96fff1817e3d2399478d28f1c24544f8d641d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 8:03:13 PM UTC  (today)

File size:
1 MB (1,082,040 bytes)

Product version:
15.0.4719.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365proplusretail_cab6f8fe-9083-48d6-97c5-a707392b75f6_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 10:39:00 AM

Valid to:
7/22/2015 10:39:00 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
4/14/2015 3:53:14 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:lQiB/UaTP5ZrMFNHGfZUl7g7s16y7dG8sfwBL3kV/w9s4VK:lQiB/UehtBI7g7k0pyL3Q4s4c

Entry address:
0x5E8E0

Entry point:
E8, 84, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 54, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C8, 12, 40, 00, 57, FF, 35, A8, 40, 4E, 00, FF, D6, FF, 35, A4, 40, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, AE, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 3C, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1791

Code size:
868 KB (888,832 bytes)

The file setup.x86.en-us_o365proplusretail_cab6f8fe-9083-48d6-97c5-a707392b75f6_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0f48a541-edbc-4d02-98ae-bdb523682275&token=13a5d467-1c16-4f60-9c70-c32983f0549b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f0b82e82-aeda-4321-88cc-f4af0b2082e1&token=cc5b3d43-ea19-49d7-aded-bc058664f564&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=23c1328f-98a1-4deb-961c-486c7b34f21e&token=bd91ce8e-db1d-4765-903c-36be95fb8ded&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=ae024140-70b5-4598-82c0-703443d0fda1&token=b94739e5-44b8-446f-836f-43375c738727&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=aa186220-89c5-4e32-b76a-64281992898c&token=dba20594-7d7d-41ed-97e9-c116b1a98a51&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ce7f130d-1a8b-411f-a29c-015f16b00ec0&token=813626e8-fcb8-4249-90a9-fbed6593d519&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c760be6f-c9e9-4c23-b9d0-594dba317a8b&token=6ca473cb-d362-4cef-abdc-f97c54a8e723&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=547cfff2-97fd-420b-a296-85b2709f1ffb&token=312107c3-b227-445c-8afb-ff36410018a8&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=aa8ab956-4f15-4cc3-bdfe-86294bac5fae&token=f9a5f066-9456-4b1c-a205-e4f70e111c6a&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ef8916fb-7714-416a-9c87-e0d79f3b0c9b&token=3d7977ac-3ed5-4004-932b-1c76c59ddeec&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7b70d4a8-4d11-4f09-a189-84c508682445&token=6a1483c2-ab36-4c9f-a007-905eda0f3c21&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=03040cde-05ad-45a8-b1b1-5c33617bf3e5&token=6b493a56-b20a-4f6c-a046-e1c6f5d2b60b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=703c4d16-1d3e-4efc-9c32-0c8c71cd24f9&token=ed1b38cc-29e2-47a9-a220-84dfb65592f7&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=ee2bcfc0-2e40-4f23-9ff9-3982484c8793&token=5bbb5cdd-2354-4791-90aa-43ed1fd26d79&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c5251ccd-ffde-4f45-9040-cec9be680823&token=b0ad86dc-eb2c-4558-abac-4963753eb03d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f089e95d-ce48-4c6e-a7e1-5a3f886d2da6&token=6f073511-21f4-4cfb-868e-3f2be8441e0e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=3298c8d3-3c80-4360-9daa-62d795ba23a7&token=8928b920-efd2-4d17-9ed1-1687231a5148&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=31f317a4-8f25-460f-a3b3-2e139736affe&token=e00103dd-17b6-47c4-a962-4e71cf895f3d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d3908064-91e6-4633-8f92-d2358fddca03&token=05fe88d6-a379-4119-af5d-91d4a6ed51d9&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=303a86f5-387e-495c-8dfa-8503ea5b967e&token=85dea60a-e25b-46c6-8c33-f7132faaa804&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1fe0959c-bee0-4b86-bc15-3ffb17b8b2a4&token=293a42d9-fbb8-444d-8fe2-2da8e9bcfa7a&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8efd0d34-7c24-46f6-9ad3-c0208e448ff6&token=9ebd385f-d9f5-4a0e-918b-cfc8d0cadcc8&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3b36d7a1-c35f-4cd6-bb1c-d35d9f33bc00&token=81ed8302-a192-4362-8a58-54c0e819212c&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=64903916-0733-4b08-9aa8-c23e374ff4e0&token=850912ac-9327-43e0-b003-6bcbc056d5b3&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1ebd5c6e-66a7-49c9-9cb2-1a7dd03fea56&token=f7349c50-dd8f-49e9-9a04-26aaf2d158ec&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d38f4a32-0e5c-43ab-ad1c-4b8100dff890&token=e3cdafbb-ea6c-424f-b993-0f126b33bf8e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b97e8392-742f-4ad2-a4fc-5afb2bf1446f&token=f5e3cb1e-9c07-4b21-9ead-d2de022fc947&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ed8b7ab6-36d5-4181-be83-0be0011a31ba&token=b0c699ae-0e20-4b72-93f2-0eb360e2efbd&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=67a85ff8-3f47-40f4-9147-ee77bfcee401&token=57f2f70c-c1b0-426b-a8d5-aef94be04a34&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b7946846-41a1-4d33-bc3e-3ac52f41aedc&token=a63a8fba-5dc1-4068-aad8-fd4e5e0b6af6&version=O15GA&source=O15OLSO365

Latest 30 of 300 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.