home

setup.x86.en-us_o365homepremretail_86b32f01-9753-4fb0-ae6c-d3edb843f706_tx_db_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4649.1000

MD5:
c118a8cfa031729d883fe8f674f46228

SHA-1:
13831cb852c10f6bcf017658914ef767a471dee3

SHA-256:
e1cd50b3c41ac0b6bb26c2552e946c81d76c5f3de30f50b4eae58cb4f05b0f6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:41:25 AM UTC  (today)

File size:
1 MB (1,054,904 bytes)

Product version:
15.0.4649.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_86b32f01-9753-4fb0-ae6c-d3edb843f706_tx_db_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 6:39:00 PM

Valid to:
7/22/2015 6:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
8/12/2014 6:22:37 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:Jt7dZuu5viufSVjB3m89ot2IgHFi5QG+wzjuNPBA6oK+n:Jtzuu5qGgk2IglH4uJVo5n

Entry address:
0x5D823

Entry point:
E8, 19, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 51, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, A4, 11, 40, 00, 57, FF, 35, 68, DD, 4D, 00, FF, D6, FF, 35, 64, DD, 4D, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 43, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, D1, 53, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1704

Code size:
844 KB (864,256 bytes)

The file setup.x86.en-us_o365homepremretail_86b32f01-9753-4fb0-ae6c-d3edb843f706_tx_db_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d3bbc722-813e-453c-8b6f-96cb5d0eb6db&token=f040a5dc-02a0-46b9-b594-2b5bbee1ef82&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=23ddc353-719b-4b00-af58-1da9262ad0e2&token=eaae3285-6a05-48ff-bef3-f776fedcded5&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=77ac0599-6ac2-41f3-9656-4e0ff57f085a&token=8f64982f-66b2-4c4d-add0-45d4a169d983&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8faaf71c-09d3-4a66-8ca7-ae0086fcec2c&token=4f48909d-0a6d-4f22-a202-513a055c4da3&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e502896f-1754-4806-abb5-d598237811cc&token=298c5563-c311-4c99-ab91-003136d4adb4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3db9ecf3-08c1-4db6-8e8d-68feac744c36&token=5278eba2-5a21-4e78-96e7-711554e363fc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d0632242-1f90-487b-ba54-b622e56a644f&token=a81d929b-934b-4e51-9e2e-00023225e642&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1ac4c7d6-436b-488e-86f5-9fe513294b07&token=31202020-6553-4005-b127-de84e1be02ee&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c4d2fcc1-483f-4a32-8a4a-f475e0108360&token=af0b491e-f313-46cf-8d10-14f78fb2c05d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5933b161-7c37-42b0-aabf-4f5b986ea58b&token=8a00006a-7bad-4afe-9f3a-e5ed63c1a742&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=82b6bb06-ed9b-496b-a58d-50394086eabb&token=bd6fe09d-6312-4580-af90-1f9a1961b2f6&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=99fce493-0b00-463f-9eb4-311664525208&token=5ffb2f50-fd60-48f1-8b48-bf9bd01a4ecd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=ad70629e-9dcf-4b47-846d-31217f281128&token=8b4aa462-0c11-4d61-87ca-e9a68f220f36&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ef7fa414-829f-401a-8893-b709babc3119&token=fdb6dbda-154b-4315-9df3-77fd0b20330b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=b0b77b43-8b3c-4f90-908e-86fcf09ba9ad&token=3b1f13e6-e012-4af7-abe8-bde8983726bc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=18e9b90c-5287-4bc8-b4f6-8a6aa7f84d5c&token=f112bbd9-e2b7-4395-bc3e-32072c2d76a9&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9dcfa654-3a87-43f0-8d01-43ed1a18876c&token=31652284-904e-4814-9bc1-7bb29a8a5bfc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d8ee5de2-3c88-4293-9b8e-972d33119b5f&token=af73b399-7717-4ba6-bafb-b9e77f8b04cd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3034ca95-841d-441a-8530-378b723dc41e&token=1da8cb68-3788-4b5c-a037-0576a8f5ca3f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0788410a-3fb7-4661-a940-7402da139461&token=a07fb2c2-b71b-4680-a68b-1f552440278d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4352d51e-e3ab-45c1-98fb-9c094c10186e&token=514defd0-7e9a-43b6-aa09-ef46750afbff&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bdca1cc8-d603-4f77-860e-05fde39ac266&token=f9760971-6ea5-4982-ad9e-8b87226a5750&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=11104328-7a06-41bd-b934-42ca8a833e39&token=982d0d8e-4f88-4e99-9931-b42da32ee2d0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7ff710e3-2e9a-4367-a68e-57bd1b090319&token=2af5a127-3632-4d11-a954-a71dba837672&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=16081908-851b-4a33-b92a-741646cb1cb7&token=33410996-29fa-4078-81e5-bd56cff4fd8f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=72063088-8c94-4f19-8a59-a091101e3c76&token=bfa0ff66-684d-4bb5-82c4-3ec12f58e0fa&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2c8e8037-d713-4b7c-a189-ff3510f72288&token=2d36cfc3-deaa-42ca-a704-9811ed3f96dc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=8e80ed90-3f0c-4bbb-b1d1-f80db6d3ade4&token=3e1b5481-47da-4eda-9bcb-7d312bfd9105&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=4b72cca2-9ef3-4465-8810-06930b059ff3&token=52f87908-3a45-412e-81ac-6412bc133c3d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=6bc66696-bff0-415e-8ff1-8650ac036ac6&token=38019993-bac7-4dec-8a48-b19d26207002&version=O15GA&source=O15OLSOMEX

Latest 30 of 300 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.