home

setup.x86.en-us_o365proplusretail_19ebcc4a-f03c-4848-bcf4-de441ac81319_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4797.1000

MD5:
b4d6ba713a4b0503d74ed2fed949b4c1

SHA-1:
72107512e859e27ef4bdfdfd5a5af818b750e36a

SHA-256:
bbbb7f3d85daf9bfdeaa6e78853457d57f418d3b3150f51f95c744e9905ac5c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 2:24:22 PM UTC  (today)

File size:
1.1 MB (1,112,816 bytes)

Product version:
15.0.4797.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365proplusretail_19ebcc4a-f03c-4848-bcf4-de441ac81319_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 6:42:45 PM

Valid to:
9/4/2016 6:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
1/12/2016 1:32:54 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:cD1hnZ+cDliRnguwTnME4hJ7U7XOVYcuwqnb+3ohhceGYpoo9+k:cD1hnAG86lo7U7eAXnS3ujii+k

Entry address:
0x5FC1F

Entry point:
E8, 5B, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 93, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, E4, 12, 40, 00, 57, FF, 35, 68, 9E, 4E, 00, FF, D6, FF, 35, 64, 9E, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 85, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 13, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1908

Code size:
888.5 KB (909,824 bytes)

The file setup.x86.en-us_o365proplusretail_19ebcc4a-f03c-4848-bcf4-de441ac81319_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a7a98563-30f1-4322-9493-ed9f1adfda37&token=a5bfd517-5030-4009-843d-0c4bc6158748&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c812d306-2370-46be-96f9-51b87f6b86c9&token=404e4300-5b36-4f06-9721-cb0c539df722&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9fb9ee92-b389-42e7-a716-1cb0e2cc882e&token=f2efa79e-1cf0-425f-9b1b-3856de0aa61c&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=26622304-008c-4dbf-bdfc-971b92c9ed8a&token=e19dea9c-49e0-4c73-bd02-7284fb2f3593&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9fecaa0d-f824-45ff-b1c4-8bd96756dea3&token=67179eab-0fcf-4489-8921-07e3c751e7f1&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e5496160-d6a6-46a2-bba6-00407f0d9e6f&token=47e96f32-f87a-4cf1-9dcc-b422dff8c9a8&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=fb2da540-30d3-464d-9ff5-c4b6b434beda&token=61587821-7176-4e49-a6ba-6efb9de6ea12&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7df4bb4f-7954-4bf3-9923-10760c01a312&token=733c29c8-cfc5-416b-9b2d-c7492d5bbd2e&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=205d27eb-7432-4b5a-adbc-02f4e07fb5fe&token=adb13f9a-9070-4d90-914c-dc1aaa8218fb&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d3e0146-935c-4bab-9362-26f742e4ee9d&token=798919cf-1015-4707-9219-adccbecc1a03&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e33873a0-cc50-444b-82d5-631a29516902&token=785b9fa5-69c0-4250-a14c-6bafd2c44b60&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=955180b5-e2ca-464b-987a-22eedd45a135&token=aca5e069-cdd6-47f1-b390-86f7a4b06f3c&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=0d17a43f-94c8-4591-9515-d1ebcd7cae50&token=cdf8b7d7-98dc-4dc6-ad24-6cbe527be75e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5e7743a5-d501-4121-ac83-d03be2b5184c&token=50c4c966-fb00-4de6-ad74-8454e1b161af&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=da804064-c486-469b-9ea9-f35dc8969f8a&token=0863be9b-7e07-4ce7-9ec6-93978e9a474b&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cf694518-1794-4626-ad91-e7e9fc691bf2&token=4e184b5b-f311-4a19-8ab9-d8aa29801e57&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bd166b7e-f1bc-40cb-b0c0-fc335707abf9&token=b821196e-bad2-4160-a286-4f1abaef1f02&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=43e06b6c-4d4c-44cd-9839-9be1b30be95e&token=d6115d75-40da-4039-b368-9f18c2f875fc&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ec2a3358-b58e-477a-9cfd-aad920df8d85&token=c0db05e2-c5a3-4283-aaab-5a28e0f7406b&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5c7cc9a8-e7e1-407d-b008-ace34bb319f8&token=62280544-6c13-421d-b432-b4c22da94dd2&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fe91dfff-fa1a-4b1a-8dc0-4d0d78a4272a&token=dfbf688c-e172-45ae-bb47-8d1d6d9a66c0&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bc44db22-4872-46df-8648-1faf0838116b&token=ccc27433-44d5-472f-8952-dd2735ee4095&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1d957fa9-8900-44e0-8c50-24c9fa0ee5a2&token=dd5ed2d7-b948-4f40-a44f-6df2a4d17afc&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f2f3ee58-2e3b-4c6f-ad2b-ac6000f060e3&token=5e290c9d-07f0-4064-8746-d2580ba35f16&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d40ea05-9494-4fb0-9c01-863839a05f59&token=c12d1f22-f93c-4e2e-a325-e7408092a0ca&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=607b5e56-d46b-4442-b16d-73cdea3f915c&token=bb454d79-6c0b-424b-8321-5c5fb4cd50d7&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=879a3553-0cbb-435d-a09b-065dce60ce3c&token=f4b365a1-cae9-4112-afde-a68bf5dcfc02&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3be7297d-1368-4bce-87be-756d7a2761bc&token=38d7ef63-c2d3-45c3-a7f1-fa6cbabb192a&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5a2bee9e-efe3-4181-8db1-86216a3fde05&token=d59a02b7-a7d9-4100-b8c0-35cd5ee2e05e&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=347e94f1-8364-44f5-843a-dda288254c16&token=38e695a0-879f-46a7-8131-7e23ac5eddb4&version=O15GA&source=O15OLSO365&B=3

Latest 30 of 205 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.