home

microsoftinstaller.exe

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from www7.downloadoffice2010.microsoft.com and multiple other hosts.
Publisher:
Microsoft Corporation

Version:
12.0.6500.5000

MD5:
92e0acd317223bffe9c7fa6e62f480f1

SHA-1:
b4283b35e8ecd012cc446f249ac71ddb7ae7a82d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:19:46 PM UTC  (today)

File size:
299.2 MB (313,766,816 bytes)

Product version:
12.0.6500.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\microsoftinstaller.exe

File PE Metadata
Compilation timestamp:
2/25/2009 11:18:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6291456:bYSu1DtrbCISW7R83EImvghnyIKjPJUNJIpfb1fFMvykskmp:cSWDtfzd7RZDvanBKjPJUJI9bJCjsk2

Entry address:
0x57873

Entry point:
E8, 28, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 78, BC, 00, 30, E8, AB, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, EC, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, A4, AA, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, EC, 5F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
516.5 KB (528,896 bytes)

The file microsoftinstaller.exe has been seen being distributed by the following 23 URLs.

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h83618720513b4a24aff8d5e792839e1e&receipt_id=552115914&local_only=true&dname=O14DL.download.name.32

http://s10374.chomikuj.pl/File.aspx?e=mYNwrDFZNZwwLigQT_xfiK7rahzCB8ZqkwAzzRQQhB0yC96a1bPiSOgx--O9j2ztZtcwYqTSopysi0WrbQ51a2MpbjRL7Kz_JUy_Ck1B4CutRv4M9PFqE-qFnwH-gAre4pPVIlT5G8iZL8aeCNOdFw&pv=2

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h51913606294b4702998f4ce430db4cae&receipt_id=552140903&local_only=true&dname=O14DL.download.name.32

https://software-download.office.microsoft.com/.../Office_HS_2007_Polish_x32.exe

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hd8001be8ee18403fb19229476f5f7534&receipt_id=552573561&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931hd1046fe0860149189298cc60d038204b&receipt_id=477730318&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h5320c080f466438aa1e810db49e21c6f&receipt_id=551860140&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931h00b5237f29f14539a8ba71703d903435&receipt_id=477357299&local_only=true&dname=O14DL.download.name.32

https://software-download.microsoft.com/.../Office_HS_2007_Polish_x32.exe

http://software-download.microsoft.com/.../Office_HS_2007_Polish_x32.exe

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931hf564e5eaa79a43ee82a5e42839104408&receipt_id=477932315&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hda217edc78c8453484e607445c5f4de1&receipt_id=552645584&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h7c8f95bb7ef644f8a8763a892b5f217c&receipt_id=551259051&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h2676e9825b1e49d1b22412856d23e886&receipt_id=551739983&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h49c5e2b2133b4e31a3fcac05a7577955&receipt_id=552524839&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931hbbb770ab554241c48469f5d986675513&receipt_id=477002790&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931h6fe490bb103941e6b09df3c86cf9964e&receipt_id=476793901&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931h1a68ce3a38214ac491edcc89c2f7f5a3&receipt_id=477907619&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h53cec4691a2e4341925d8b7b4a3cb1f8&receipt_id=552446239&local_only=true&dname=O14DL.download.name.32

http://s10374.chomikuj.pl/File.aspx?e=mYNwrDFZNZwwLigQT_xfiK7rahzCB8ZqkwAzzRQQhB1mbGwgD3FtvHr4QoNsWXPacottx_lAAi5Rw1UeiK5f8ChIxXlLO_I0yu4hpPdtr6X5qk4FSRe803TwtnBqWJziYVbfrx6ktU-g4ju7TSLGAg&pv=2

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932h601986c02f694b5e9420067a2b29e8a9&receipt_id=552408991&local_only=true&dname=O14DL.download.name.32

http://s10374.chomikuj.pl/File.aspx?e=mYNwrDFZNZwwLigQT_xfiC8A1lC5tms7hbkBVN26TkGFFw6lIRUHK4PheZwaRKJdl2-h9518PPvgEIU9Hz8dOBf52utrRiixPw_-0eFoZ-2-IEtxyjmd3UA-ZQeVW9hwvRWqN8A28D_qGPc4mB09Si29Diw1IYXvEfIG7K2FYJQ&pv=2

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hf03288ecf949431c98a5cdbc25554253&receipt_id=552008127&local_only=true&dname=O14DL.download.name.32

Scan microsoftinstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.