home

setup.x86.en-us_proplusretail_f8jw4-ggn4x-bjhyq-3bypj-vh363_tx_pr_act_1_.exe

Microsoft Office 15

Microsoft Corporation

This is installed with multiple programs including Microsoft Office Professional 2013 - en-us and Microsoft Office 365 Home Premium - en-us. The file has been seen being downloaded from c2rsetup.officeapps.live.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4481.1508

MD5:
b37493543ecae9d074b6cbea02ad4441

SHA-1:
4eb8b3adae8295b9e371f99daacc988ef7a7adff

SHA-256:
a1e15ac79bce2c36e024d383b3015237d9838d7a13fd476a3f39a80a6bf12ab1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 4:27:45 PM UTC  (today)

File size:
547.2 KB (560,296 bytes)

Product version:
15.0.4481.1508

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_proplusretail_f8jw4-ggn4x-bjhyq-3bypj-vh363_tx_pr_act_1_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 10:33:39 PM

Valid to:
4/24/2014 11:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
3/12/2013 3:14:24 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:E7dmpG5azBqGkjDSu3ErVxWyFy22lX0ygE3:EcpG5MqROIWxWyFy22lX8E3

Entry address:
0x425C0

Entry point:
E8, 71, 4C, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, EE, 18, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C0, 11, 40, 00, 57, FF, 35, 48, DA, 46, 00, FF, D6, FF, 35, 44, DA, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 9B, 4D, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 29, 4D, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
5.7574

Code size:
405.5 KB (415,232 bytes)

The file setup.x86.en-us_proplusretail_f8jw4-ggn4x-bjhyq-3bypj-vh363_tx_pr_act_1_.exe has been discovered within the following programs.

Microsoft Office 365 Home Premium - en-us  by Microsoft Corporation
A subscription to Microsoft Office 365 Home Premium lets you install a full copy of Office 2013 on up to five devices and also lets any Windows 7 or 8 machine temporarily download Word, Excel, or the other Office apps for use on other PCs.
www.microsoft.com
10% remove it
Microsoft Office Home and Business 2013 - en-us  by Microsoft Corporation
8% remove it
Microsoft Office Home and Student 2013 - en-us  by Microsoft Corporation
1% remove it
Microsoft Office Professional 2013 - en-us  by Microsoft Corporation
6% remove it
Microsoft SharePoint Designer 2013 - en-us  by Microsoft Corporation
5% remove it
 
Powered by Should I Remove It?

The file setup.x86.en-us_proplusretail_f8jw4-ggn4x-bjhyq-3bypj-vh363_tx_pr_act_1_.exe has been seen being distributed by the following 30 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=N7T46-FHQ8D-F4MMF-QF2KW-D9JQD&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=SG

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303232h9eb1f5c95f7f46b084b613f58f01203a&receipt_id=841132756&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f6438h508e4ce9fc1045b688d5cbf86fd2dccc&receipt_id=809030031&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303232he1be109b152a4fd69e1cb66ecd7b2dcc&receipt_id=841115501&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=N96TC-7B73K-WR249-FP4WK-Y7R3D&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=PR

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303233h3335773cab0e4bd4bc18c9233fc097e1&receipt_id=862434361&local_only=true&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=611355634&id=g506f6436ha739195fa2c34fe29fa924589a6950c9&culture=en-US

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=F3TNJ-9HFC4-CD4RW-Q628W-4VR3D&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=SG

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&receipt_id=576920035&id=g506f643134he7ee5a5c06764198af98ff4028635ded&culture=en-NZ

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=708721069&id=g506f6437h0ace113667e94f2b881b60c20b483dc6&culture=en-CA

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=WPGHM-MNYH2-27TFT-7MVWX-HCCDD&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=PR

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=809006976&id=g506f6438ha6554c0abe9d4198ad7bd905b864b0a7&culture=en-US

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=TKJNF-9MG9C-G49GR-8P33R-X2CDD&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=PR

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=X63TC-K4NDV-3YRTB-2TT9K-FRD63&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=PR

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=708717794&id=g506f6437hd8306a36395842bb96c498f13492b2b1&culture=en-US

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=KNWW4-3VRGQ-K7WBH-FM2W9-7XJQD&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=PR

https://c2rsetup.officeapps.live.com/.../download.aspx?Source=O15HUP&language=en-US&act=1&TaxRegion=PR&platform=x86&version=O15GA&ProductreleaseID=ProPlusRetail

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O15GA&Source=O15HUP&act=1&language=en-US&token=46RYH-4N8BD-42K8Q-Y8GY7-2R2DD

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303233hbe3d74c39d0e4ef48a85e677db092582&receipt_id=862389700&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=G44JT-TN8VC-QRV2Y-97CF9-C7GXQ&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=PR

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=809041756&id=g506f6438hf5342f9383594bacab8e5e90c41dd4ff&culture=en-US

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303233h7d77e57c417b417f971155ba92d19539&receipt_id=862445604&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O15GA&Source=O15HUP&act=1&language=en-US&token=CNC62-R622H-9R28Y-V48DQ-C343D

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=FRM3T-7NMMG-PGWPJ-VQ7RQ-489KQ&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=PR

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=4YRXW-NPPGK-V2HFG-48TR3-97363&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=PR

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=SG&version=O15GA&language=en-US&Source=O15HUP&platform=x86&ProductreleaseID=ProPlusRetail&act=1

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&local_only=true&receipt_id=212822705&id=g506f6432h85ed6c0ab4e74491b5541899b94681d0&culture=en-US

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&token=BKTJ2-NC239-W4698-Q3D2B-3GKKQ&language=en-US&platform=x86&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&TaxRegion=PR

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&version=O15GA&language=en-US&Source=O15HUP&platform=x86&ProductreleaseID=ProPlusRetail&act=1

http://www.microsofthup.com/.../unitdownloader.aspx?dname=O15.download.name.32&receipt_id=577056273&id=g506f643134h1665e2754bda4d2a8425d640b0d05e47&culture=en-US

Latest 30 of 30 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.