home

setup.x86.en-us_o365proplusretail_cf9a7bdc-fd59-4449-ae05-03487dc90725_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4649.1000

MD5:
2416ff9b990f438056de8f0da2883c94

SHA-1:
56db781bb7f27e69b33fe307423fcf5847b6a573

SHA-256:
31d43691df5e7124e282911cb14e8507a70475b704756b5c5c547ab73c849bec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 12:40:51 AM UTC  (today)

File size:
1 MB (1,054,896 bytes)

Product version:
15.0.4649.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\vy06oot4\setup.x86.en-us_o365proplusretail_cf9a7bdc-fd59-4449-ae05-03487dc90725_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 10:39:00 AM

Valid to:
7/22/2015 10:39:00 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
8/11/2014 10:22:37 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:dt7dZuu5viufSVjB3m89ot2IgHFi5QG+wzjuNPBA6qb+y:dtzuu5qGgk2IglH4uJVqqy

Entry address:
0x5D823

Entry point:
E8, 19, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 51, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, A4, 11, 40, 00, 57, FF, 35, 68, DD, 4D, 00, FF, D6, FF, 35, 64, DD, 4D, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 43, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, D1, 53, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1703

Code size:
844 KB (864,256 bytes)

The file setup.x86.en-us_o365proplusretail_cf9a7bdc-fd59-4449-ae05-03487dc90725_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2c92f9cd-e66a-4a3f-8ad1-bc311d6bdbff&token=48b92cdf-76ea-46b9-95fd-8e1fd8bbfb41&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=1572f594-fa64-401a-abf0-a489a4156cd2&token=8d381347-ae1b-49d4-810f-6bf556923bdb&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ccc65535-9b1e-4ba7-a7ae-a659165e10ee&token=58a7852d-168e-4b93-ba14-7dded0dd5177&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=8694ede0-6bef-4baa-b589-9398a9763bb6&token=0708eda7-0d9d-49b9-a8ff-f5e9b7a95bf0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=6d31bc26-4dc2-4db9-95ba-0ca2ce2fde83&token=aca2811b-d874-431a-b5d4-7dd321522ba1&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=91531bde-a3d9-4286-9d28-a3adb2ea5166&token=8c6baa5f-2bb6-4247-9b6d-d5b2b1528551&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=9460122e-ea97-4f44-9d31-5543df134021&token=01be64bd-cdb4-4e21-8bd8-8719b137654b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=e63a61a9-a903-44e6-81b9-bf81a29c3ab2&token=b4b17138-0a1a-42fe-8b40-94007ae58cda&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c2085194-02b2-4aa0-bdc8-0d9920d6b8ff&token=8bec518f-c68b-4fe1-8c3e-95f82566b53a&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=752d30d3-c750-452b-8eb1-113e90a37fdf&token=662301f0-9174-41ff-97a2-b5bee3170890&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1ce2e891-2da0-44db-b81d-0c039ff36caa&token=1b643226-f343-447e-bb57-c2d45b824e92&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cbc9a6ea-1360-4e49-bea5-5d6c5db1e11c&token=5e942624-e491-4beb-9fbc-2dfa1e0c217a&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=1e0b2dc2-2509-44ee-bee4-9ee6f3afbc2d&token=8b1536e0-a78f-48eb-83af-f946fa1a52cf&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5752fffb-1ea1-4602-96b4-cec0afeb8c2b&token=7a9f3a93-d63f-4d2b-a0fb-71ce12de9f48&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9c649588-566b-4b6f-9cb6-5eb536a7efb7&token=69d5f462-9770-44f3-b407-88782366ed77&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=756acbdb-dcfb-4486-8182-a00eca129a93&token=37234ade-8930-4f9a-a6f0-66b82e1c31a0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=d8fb08dc-7df0-47e5-b330-303b9a7087d6&token=b9f72535-5607-40d4-83d5-a4ff1af47f8b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=cd20376c-1b85-4000-a29c-9e7030a10bd3&token=6070aea7-4f9e-47de-84ee-6cade2445eee&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=0f4823a2-4df7-49e9-8e7b-121e813d322d&token=e77deb25-f3c5-46bd-9928-0dc75c42e546&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=09d68a31-997c-4174-bbf0-d26b9a3a90bd&token=7084b088-9b54-4df0-b966-826910a90d14&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=18771510-bbc2-4894-b3bb-48428e6f3c9d&token=338aa57a-349f-4301-b3bd-b3c9c42e3aef&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f599d9eb-b7cc-436c-8026-07ad2156a4e3&token=199b739d-2041-4214-8cd7-423da36ba9d6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=62b30f33-bb23-4cee-9a97-3917472c4de4&token=0bf1403a-1841-44ed-a206-048059f75c41&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=61ecdd7f-a931-4876-a809-daa372547d8b&token=aae947f0-6e90-477b-88c2-0804171eb855&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9664c60a-62b8-4ddd-8a48-0483b3bac672&token=0d778c4d-5580-4fa9-8b17-816ac7060f06&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c457ccf8-ce94-41db-8fde-027e46bfe164&token=e72c1c06-fcaa-4704-9a07-36decf87c430&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=1d469c7f-6fb9-4b2e-8d49-2ecefb3a158d&token=e33d2821-4cf8-4b3d-a1c6-1e39d45391df&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=83d11de7-181a-49a2-8ada-d100dcaef46e&token=f2f6aa63-1765-4cbd-9b15-72bd65b840c0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=07b83d36-f230-4d4c-bfef-581e72bac183&token=f874d021-7b85-4e83-a0cf-bdef35ebb443&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f33cb901-cf33-4a89-96a0-7a875c8f7b9d&token=2af0ca49-dff2-4f34-a9a8-461b018a0974&version=O15GA&source=O15OLSO365

Latest 30 of 80 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.