home

setup.x86.nl-nl_o365homepremretail_924c5dfc-d04f-420a-9c14-e3385327e240_tx_db_.exe

Microsoft Office 15

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from c2rsetup.officeapps.live.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4128.1025

MD5:
e40e444f77bd47517e2b179078d3e4ae

SHA-1:
d8e7fbcb4f0d10729a98f3f88111609b8b4778d5

SHA-256:
47bf8cd4c4ddf5fb793d029f75ce4b16f366187672c77b2643fd35d1661c5626

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/7/2024 6:59:56 PM UTC  (today)

File size:
488.1 KB (499,840 bytes)

Product version:
15.0.4128.1025

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\setup.x86.nl-nl_o365homepremretail_924c5dfc-d04f-420a-9c14-e3385327e240_tx_db_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/26/2012 10:50:41 PM

Valid to:
10/26/2013 10:50:41 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/11/2012 7:14:49 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
6144:xK51qXRXrhWz+GVmJJHNZpeojLeGyTz4fJZ0iHfql5mGqvUTsAZLOPKUKJYrC:xK5qRXrhWz+xNZpeoGT4fHHfqJU+LV+m

Entry address:
0x449D0

Entry point:
E8, F6, 4A, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 94, 17, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, D0, 11, 40, 00, 57, FF, 35, 48, 63, 46, 00, FF, D6, FF, 35, 44, 63, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 20, 4C, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, AE, 4B, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Code size:
380.5 KB (389,632 bytes)

The file setup.x86.nl-nl_o365homepremretail_924c5dfc-d04f-420a-9c14-e3385327e240_tx_db_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f5432d9b-8974-43e7-813d-8ebdfa265ec5&token=ec0829c5-099a-4ced-a170-ef2a568cd6d1&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=9b4b8e0f-9190-48c6-af91-863a37c5f76a&token=8763b6f5-4e0c-410c-be72-98c60123df92&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=a896192d-a42f-420c-88b5-a8605b3ac1a1&token=84962e80-1ac6-4ccb-b06a-7fe009f5b2f0&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=db&correlationId=bf11cfe9-59e9-4c95-a566-fd874c5b646c&token=c6ec19c6-156b-4eab-ac84-fe9b0578bdcb&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=0229c083-0bf7-4847-aa58-20731948d88f&token=fbf67c54-fbd2-4f2e-8b89-07204d2822ca&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=sg&correlationId=be8421ff-cd17-47a0-9e54-f07b8e209e2d&token=eae2d2f2-1250-43bf-a5da-d4c63b60523f&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b51c70a2-dc3b-4d53-80f4-ca8534ad2b5f&token=1f15972e-e0bc-4043-a876-bfa9151f659a&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=88ce512e-fd6f-45b9-9919-103d7b2584ec&token=2b630dcb-b52c-4617-98e1-bdcc648edad0&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=217d2610-b4a0-446d-aeea-c861fafe026a&token=83b9e33c-bf95-4672-88d5-d456592c8b4e&version=O15Beta2&source=O15OLSOMEX

http://www.techspot.com/downloads/downloadnow/.../?evp=2bae551269244c525bfb4900685922e9&file=1

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=167a1a66-e48b-41b9-92b1-3eb7ee7ab0a6&token=ef3699f1-b55b-469a-9a5d-92df1c77d83b&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=sg&correlationId=a66fd156-f375-4058-bd83-41e315278d07&token=abb4c8c4-f69e-4326-b389-8b94e8b24970&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=9d449b17-e44f-49c1-8ed0-737254ee4639&token=a40a4cd0-da9b-4e67-8644-03e26ab22e73&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=ec037e13-7d46-4d5b-b697-6d9d83129a65&token=366281a9-c06a-4683-a9ad-a13b346876dc&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=806ca819-4f01-47b9-a0ca-2e8cc77565bb&token=1d4591d8-bf25-4a1e-91c1-4690b130ce0b&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=b5b563cc-08c3-4090-9d22-ed57eeaf7202&token=cedb3f80-db57-49a5-bd4d-1d6e0b35402e&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=2091d276-37e3-49aa-9959-33fe14305a05&token=637296dc-53e2-427c-bd85-59b9d6de2e00&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=db&correlationId=f757698e-f605-437d-97df-d13bb3b75241&token=fd8b95bd-0a8c-473d-9e51-21148e732de6&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=30c6e16b-0003-43c9-98bd-d60d10c608a5&token=4aa447c7-66e9-47fe-948d-a0877a033e37&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c1f86666-87f0-40dd-b4b6-75eacb74b94e&token=4aa447c7-66e9-47fe-948d-a0877a033e37&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=3bbc729b-7a72-46fe-9255-2f41eaf07c5a&token=f89e9cb4-d565-4e7b-a482-cc21022cd22c&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=6980b6ad-e9cf-4b0c-9742-be1d74726dd6&token=f89e9cb4-d565-4e7b-a482-cc21022cd22c&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=5d03594f-3c24-44a8-a0f1-6e61e1c4b28f&token=09dd8db4-74b6-4a52-a487-dc6f9d7d5065&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3225a2e1-3bcb-4a0b-9c11-c3c076e62ba9&token=c5712828-7155-4c36-8391-aaf4474d8000&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=59af022d-e61d-4f0e-90d0-dec518246617&token=68f90e30-2a07-461d-9d36-448570f32284&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=786e3983-c879-404b-9060-b4dea67fb8d8&token=af4ef60b-4f75-4f02-afe4-8e1c6a834fac&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=7153843b-9ccb-4a0d-8570-c3007b07ed61&token=1630c61c-d258-4de2-9b09-b752a13a0b6a&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-us&TaxRegion=db&correlationId=746961d5-805f-453c-a6e5-e185485c9a26&token=5b9f9e13-7d35-4b51-ad9e-817991c257eb&version=O15Beta2&source=O15OLSOMEX

https://c2rsetup.beta.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=901a67f2-3c36-4e3d-9ec9-f9a8834eab2b&token=4aa447c7-66e9-47fe-948d-a0877a033e37&version=O15Beta2&source=O15OLSOMEX

http://www.techspot.com/downloads.php?action=download_now&id=5421&evp=c6b8ca9623ece1d5f0a5ce4ca9efb3d8&file=1

Latest 30 of 56 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.