home

setup.x86.en-us_o365proplusretail_f582d45e-76bd-459e-a62f-37e4c54baadc_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4753.1003

MD5:
bf8712a9357344ad02d5250bd1c129bd

SHA-1:
1ee7f93a323a2935bbff5405251541f36e499d73

SHA-256:
7c9d6c3f8b4ce7304ce614f57aefec80064083b4861aefc4ac110053f1ec12b0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/17/2024 11:35:31 PM UTC  (a few moments ago)

File size:
1.1 MB (1,104,472 bytes)

Product version:
15.0.4753.1003

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365proplusretail_f582d45e-76bd-459e-a62f-37e4c54baadc_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 1:42:45 PM

Valid to:
9/4/2016 1:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
9/11/2015 5:44:30 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:7x2Vbo1m26RCpO0ELaCZSQQxlort8+ppqg2VBjNzliIcc8Mw7:7IVk1m/o04bloreC03J/Jw7

Entry address:
0x5FD83

Entry point:
E8, 57, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 8F, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, E4, 12, 40, 00, 57, FF, 35, 68, 8E, 4E, 00, FF, D6, FF, 35, 64, 8E, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 81, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 0F, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1748

Code size:
888 KB (909,312 bytes)

The file setup.x86.en-us_o365proplusretail_f582d45e-76bd-459e-a62f-37e4c54baadc_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5ac010c4-f4c2-4747-ad03-f6a795724507&token=598d0dab-d36e-4c69-a367-71178eaab05d&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=d1ceb8f1-607c-4be2-90a8-8ab2af292af3&token=86c9c95a-3b26-47f7-bb91-fff3e1442116&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7fe8d2ee-ed8e-48f9-a17f-3fd27d329813&token=47b105b1-bbab-49c6-b3f4-d026049c0feb&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cae4b22a-7c37-46b4-8ad7-3701a13cad3e&token=9cecc753-aeb0-440a-88d0-10201a3dbf02&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=ffb872fa-f72a-4589-a55f-a53b9c09a7f9&token=a9c8cc5b-4f0a-444f-81fd-317d3b46c5d6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e9ebcbf8-96d0-4a41-892e-165e577f56d8&token=69af919a-5f07-487a-accf-5aee62f6bcce&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=88ae9099-9c8d-4025-b017-8592d9544663&token=db6884ef-a86f-41fc-9d38-52f22202e9e9&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c31649a6-a877-4974-ba6c-983fc646a586&token=493d2813-8b82-4857-be41-5db4eaa3e7d3&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=012933dd-be10-4904-9fc8-62b909ecee96&token=c71fa5f1-c8ec-48db-9b26-94c80e34548e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=977c5854-0b3f-4640-90ea-18517c4649e2&token=950ea091-8df1-40cd-a043-a2c53d5ddf5e&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d3bc653a-f14c-4da0-b19f-b8e67bc04640&token=743e880f-678d-483a-8943-56cc4890c02f&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6dd2e8a4-c7b8-40f0-9bc2-803bcf99cbf1&token=20bad55e-f1d5-44e6-a5dd-fda6d404c2c7&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a5ad2904-b91c-4f3a-b65c-218345af3249&token=dca89a51-3695-47f7-afa7-6b01d95b5bb9&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ff20224f-9d81-4082-9d1a-8a1c7b2a9da0&token=8854c511-5dad-40b5-aa0d-b9f2e59dc069&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=14b25d8b-9e3b-4501-9043-4f6725d36a78&token=6c8223f5-ddea-4f12-b8dd-44b8efe72dfb&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=927572d9-fba8-4b7e-9e21-79295d5ec49e&token=88a2cf4c-3506-4714-856d-0ab618f2a650&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ae210d6d-057b-47ab-b3eb-aa18980abfa2&token=c7f82932-c6a6-4384-a096-83f367447fd6&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=25ce769d-b75d-4c7d-b5bb-7286b4c647b9&token=c7759245-19ec-4626-9d1a-faa7c2b5b146&version=O15GA&source=O15OLSO365&B=2

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f513819a-c182-4fa0-837a-a988391214b5&token=b7e9b5c5-4fed-4f34-8295-fdf847b7f883&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=c8c9f7bf-dca9-4243-8843-8d7326619cb3&token=dd406724-6d53-42e4-875a-c011aad6a772&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=64ef1f1d-7508-45a1-8cc0-768f421fde2c&token=42753057-088c-4b57-9646-352159511915&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=162912e1-c3a4-4b2f-a7e1-8931ebcc7960&token=6859dae4-d8e6-486d-a9b5-a3e890064dfc&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=14b9a8ce-e2ff-4eeb-a5f8-637812ed255e&token=8aa9825a-b268-4d11-bd66-49d805d8e2b0&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=eeec444a-3901-4e9f-b85c-b2a6a26c4556&token=8168f7a4-419e-4c3f-9f1d-3ba5cdf2e86b&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b400e196-88cc-478d-89b1-c5450591b494&token=e0091ba6-8164-4b8f-ae3b-051b73ae9b4c&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2168b7a5-d855-4770-88b7-938023df0117&token=5a07dcc4-1f33-4064-8117-b6fd03781a2c&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=5178856d-e830-4cce-8eae-096aed8495e2&token=b763fda0-2f8a-4b9e-bcfb-fe831f0280f5&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d15b8de-aad8-431c-ab7f-fbf65b54fc85&token=32fe07e6-ead3-4588-ad93-7d81656b3274&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=797c21d3-22e6-4926-9958-fdc9ec2aadbd&token=95249e6f-592b-46b4-a76c-ac821750f0be&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8863e853-d424-4a9e-851c-fe96bbeb5adc&token=673be669-0aa0-4e83-a5ec-672ec4e6037a&version=O15GA&source=O15OLSO365&B=3

Latest 30 of 4,718 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.