home

setup.x86.en-us_o365homepremretail_0fc13f7d-7657-4137-b94f-7759a8c337c5_tx_sg_.exe

Microsoft Office 2016

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.7167.1330

MD5:
f87cda696daa0db0c3ede1e4b730fd4e

SHA-1:
14606e579652894a994cd602236e100e2c8d2529

SHA-256:
cca79acdf28d95a0aabd10e6265992fceabbd1b205f1ae52ff4cb389672cb02c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/30/2024 7:57:19 AM UTC  (today)

File size:
3.6 MB (3,782,336 bytes)

Product version:
16.0.7167.1330

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_0fc13f7d-7657-4137-b94f-7759a8c337c5_tx_sg_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/5/2015 3:42:45 AM

Valid to:
9/5/2016 3:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
8/5/2016 3:28:35 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:XoFjmWPXioGyiU2UeTCVWd6AVZofVVIbiUFD5O5tN35FdV0I+RZPzOjRiffdSY/J:XoFWuAkYOjMxv0yDtBfYuCrwY2sY

Entry address:
0x172977

Entry point:
E8, BF, 0D, 00, 00, E9, 80, FE, FF, FF, 3B, 0D, 08, B3, 6B, 00, F2, 0F, 85, 27, 04, 00, 00, F2, C3, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, 8D, 12, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 40, 75, 6C, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0...
 
[+]

Entropy:
6.5726

Code size:
1.8 MB (1,934,848 bytes)

The file setup.x86.en-us_o365homepremretail_0fc13f7d-7657-4137-b94f-7759a8c337c5_tx_sg_.exe has been seen being distributed by the following 45 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=08268d68-33cc-4a05-b59b-ea4a924d54d4&token=00c9f19a-2089-42da-9d08-de2d3acd7b65&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=53818311-0f3b-49d3-8dca-d3ef476988ca&token=0109a80d-6d03-469a-9695-562d22bd700f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=651359fb-7c92-42a1-ad03-1cafe86ea960&token=03fee931-63cd-4e23-a094-4b33ef56f6bc&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3bc750b8-18ca-491d-9a28-733373e4f6c8&token=054d9cd8-3539-42a1-84a3-727b60e9caa1&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ebf4040a-4183-42f3-b71c-bafaee55f1e2&token=095545e8-46c7-4a9d-a530-07755e476d9e&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=db3d8330-4e66-440e-88ed-714b75802344&token=0be16e65-91cb-4995-83dd-51b04ffdf138&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3d657952-1c65-443e-a1b5-db0a182ee230&token=0473deba-227a-4bca-953f-5c13e3d2f0b2&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cafcae21-248c-4944-89f8-f5cd4624ead4&token=01f0c276-7b33-4250-be0f-213ff1b10b0f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=acf6ce7b-e306-4b10-b02e-b96ff39cf04d&token=07dc5e30-99fb-46b1-b9d4-04afc4dce7dd&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6b38f9cd-4d93-440d-b844-437919aa3421&token=0e7d38ee-f782-4935-bc0b-442ae2dd458d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=582b6fbe-3bea-4866-8225-bbf6cb287b5c&token=0ee86edd-75f4-4570-8866-25537e41e10d&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3833b4e1-f49d-4865-bb92-6a94dfa6eb80&token=011bd0ba-f77e-4fd6-8c48-70eddb9fa70c&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d806be3-3b7f-4a34-aaf4-ea45bfc10b8b&token=022ae4d4-9f66-4dc2-aa7a-5aeef1a68ab5&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b4897691-0956-4f0f-b3e5-df852d9f628a&token=065a16fd-6ad1-4bd6-a2f5-91b5e78b3fa0&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=77407232-3217-46a8-97bb-24e39515ab4a&token=0ca53745-53c0-44ed-9c6c-99a95d3eb9de&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=7bb8da86-8da3-4455-bcb9-60f5851d45fb&token=00458d8d-c7c9-45aa-a69c-b43f57ea3df4&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0945fd05-687a-4d30-af78-6ce0415b194d&token=04729b26-d4c8-4046-bc0f-97d0f4677c16&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=bc7b8fe7-0563-4e4d-a5e5-5f5741386388&token=0caa1458-76dd-4584-8ea5-29619f16e708&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=32fc0fea-45a2-43e5-86ae-98df0055fb18&token=0166816e-fc25-4e83-93fd-f08da87f72cd&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bc49a54e-9186-4861-8c0d-54dcd2a8ac02&token=0babebeb-6561-4ad9-b04e-aca111a9cc36&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c1444f7a-5f40-4caa-991c-4af8a936c740&token=0a7080be-27b8-41b5-8b86-fc0cc60e754f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a8737cf2-0176-4bc8-816e-79d9b0d862b5&token=0f0e0509-b0f4-4092-aef4-a46d225c58aa&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d85313f8-7475-4e40-a655-7f71088d6103&token=0558f37d-a2e1-4b8c-91bf-b5eff8501f35&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=755819c1-eda1-42ca-8129-cd664ab5c7b4&token=07c97084-50e7-42b6-841e-feb33f0bca41&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=6998e735-c779-4354-a8d4-308fcb5e207a&token=0e8c9568-a3e0-417b-9f33-173709ced9df&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=25710429-997c-43b1-af0c-70302060570d&token=072faf24-c5f1-4575-b89a-69d534c37a5b&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=7e1ba754-de01-4e67-9bd2-46a65a6d19ae&token=0ddec933-5cbe-49a9-900a-1aa8f4f6a21c&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7c04a098-0b7d-4329-96f2-59f9c2b410c0&token=088e8b54-ce86-407a-af86-2042e6fd8d76&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=f529b8b5-5e5c-49a1-ae2b-4823f07d1984&token=0cc5b88c-2fd7-4cdd-a22e-bec3849a37f4&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7b1ea1d3-4bf7-455c-af11-25051262b4ce&token=075b1d33-880a-4b04-b4ad-6a786d3d1f51&version=O16GA&source=O15OLSOMEX

Latest 30 of 45 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.