home

setup.x86.en-us_o365proplusretail_db4db1f7-9d0c-4b3d-8c0b-58e3e21e16a5_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4787.1002

MD5:
33946313fef6442eb7aea0985a231e36

SHA-1:
ab9801fd4005b840377991be392d1a7914bc4b40

SHA-256:
525506a49d06e79de28aa05f4302f8764e5801c4a10dacf2f766e162295d157b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 2:14:36 PM UTC  (today)

File size:
1.1 MB (1,103,544 bytes)

Product version:
15.0.4787.1002

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365proplusretail_db4db1f7-9d0c-4b3d-8c0b-58e3e21e16a5_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 12:42:45 PM

Valid to:
9/4/2016 12:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
12/22/2015 11:11:55 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:9AdmaIi6VkH0lv8PWTKHW5uWev07Nq/Ed9xysJ/0qqTz:9AdmaHCQmV5uW2P/2bysJYv

Entry address:
0x5FCDD

Entry point:
E8, 5D, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 95, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, E4, 12, 40, 00, 57, FF, 35, 68, 9E, 4E, 00, FF, D6, FF, 35, 64, 9E, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 87, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 15, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1718

Code size:
888.5 KB (909,824 bytes)

The file setup.x86.en-us_o365proplusretail_db4db1f7-9d0c-4b3d-8c0b-58e3e21e16a5_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=115171bf-4271-4127-8662-8594f3afb1fb&token=81ce978e-abac-4107-b524-14b4f8772446&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a647755c-3432-4bee-a80f-440867a20c4b&token=04bde9ca-20b7-40b9-be3b-fb6f6109f31d&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=8ed668b4-5835-4870-99fb-4971c1ae81a2&token=a88bd890-d3c7-4ada-b6ac-a3dbd9304525&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8ba0dc55-8cfe-438b-8264-044d1a7735b6&token=8a7b0d73-142f-40c5-b5e0-4df777ab8437&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ec1842ff-0d3b-4320-bbd5-da11979ff6d5&token=5d1ca1b8-11c9-49dd-8d51-1b3e484cab25&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=824242fd-abe2-4d1f-99f0-6a0ed3c34d87&token=9c0dcea4-6863-4cde-899c-054f95e95339&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b661fccd-0fe8-48ef-92fe-323881defe67&token=29176ad6-4aa6-4b68-b881-77e1e6b110e8&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=597e04ae-930b-4105-b424-6c4da75bed4d&token=256e89a1-5476-4c4d-850c-ff62ffd0e634&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=d78fd4fb-9935-4af9-ae5b-ac9bcaa87f46&token=85e6bf1b-887a-4611-8372-54fcf91665a0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cf5b9554-5b5b-4f86-bf3c-70afd716477a&token=c318f288-d1ac-4a0c-bb6f-6b0509f8bfe8&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3fe7bbf9-3692-4ed2-995d-a7f750fffe1f&token=dfaea6ef-0ffa-4fb0-be31-4926cd50fd8f&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=e0edac97-1bfb-4922-8000-4f0c8188edbd&token=fcc40612-34dc-4898-b555-0548c10418e9&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b18b1039-c105-4fbb-a354-baaf9e90a723&token=3d8f5f58-4793-48c2-a8de-21222dd6c4ef&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=953fa23f-30a2-4698-9b43-667b229dbd4b&token=7d6792e9-fa69-4970-84da-0d835743f123&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=393821f6-2c6f-4575-b571-ef5a3387fcd1&token=7ba378f3-64ba-416e-adb1-f4b46e81ea58&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a62df6a1-80b9-40dc-8033-6b946133adb1&token=a1fcd73e-2786-4d5b-a00c-41595df68c7c&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4443ddb1-a0db-4bf6-8420-bd901f2fb42d&token=0dc87634-6f25-4734-ae79-e2d6a0aebb55&version=O15GA&source=O15OLSO365&B=2

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4f5404f2-e501-4a66-86f1-2f638bf7887a&token=229c6625-3390-48c9-83b1-8612b7852cff&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=6c4a2479-1e3d-4666-8f55-e625564ac091&token=2baf30cf-457b-41ec-a6fe-2639666ad447&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bc022454-5420-488d-b836-209f42e7fd79&token=ce255b0b-780d-4318-96c9-e55f2fb53854&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=59d6b776-1bee-44b9-82f1-4988e095307b&token=9f35eec3-0c43-4165-b43a-fcd7c0a44b68&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=beed96b3-71a7-48f8-a72b-f82a7208b245&token=fde19e14-2c9a-4baf-9d41-8db8c1534612&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=c00bfeaf-5de8-46a1-b079-5462b8df4aea&token=687ddebe-f1d9-425f-958f-55d6a6022738&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d2320976-0017-4265-8474-b4f7b11b0d6f&token=496badfb-14b4-452e-969b-5d1422a9db11&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=46600fb6-481f-4274-a701-09f7d651262f&token=b2d579e6-e4d3-4184-9a4c-5b65475453cd&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=64144b9d-99ca-4245-b490-846afabe9ed0&token=c5ef000d-57cd-48ee-b95b-af5c1f3fe645&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=2a4c1b44-a0b9-48a3-b56e-520852ed7123&token=ee627288-22cf-4e13-b11f-e8c877d58d83&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=625c2bc8-5b77-4c49-91f9-23a9f3ff86de&token=e496f2a8-3826-42e8-8684-ea390e117e51&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f664580c-cfa1-4a4a-b432-c6e513dc3ea7&token=8f5882e4-2385-42d7-9a0e-54e2cc8bd67c&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0b6b5e40-a532-46f3-a61c-92fc40f332d6&token=3d78e79e-0502-46ad-903c-c04320e8c2e9&version=O15GA&source=O15OLSO365&B=0

Latest 30 of 965 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.