home

setup.x86.en-us_o365proplusretail_b5cea242-9822-4b44-83fd-0e8eb8af4434_tx_pr_b_3_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4745.1000

MD5:
e294cf5b81d81669fabd1ee0893cd461

SHA-1:
bac614986a5ce48dabf2e7bbb4f912ac71185e02

SHA-256:
8d65f4bfc2fb739c95345c68f1b3535f7959600399d99aa49cd2c47aa06f8ffe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:35:27 AM UTC  (today)

File size:
1.1 MB (1,103,960 bytes)

Product version:
15.0.4745.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365proplusretail_b5cea242-9822-4b44-83fd-0e8eb8af4434_tx_pr_b_3_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 10:42:45 AM

Valid to:
9/4/2016 10:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
7/13/2015 11:59:09 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:WAdz4S2djzsyPk3Fx1WwYcYX6lPJPP/ssxUG1/LkxjKiHnRWg:WAdz4ScfKZtYXwPdPN3/kHRz

Entry address:
0x5FCFA

Entry point:
E8, 8A, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 98, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, E4, 12, 40, 00, 57, FF, 35, 68, 94, 4E, 00, FF, D6, FF, 35, 64, 94, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, B4, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 42, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1797

Code size:
886 KB (907,264 bytes)

The file setup.x86.en-us_o365proplusretail_b5cea242-9822-4b44-83fd-0e8eb8af4434_tx_pr_b_3_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=df07aa2c-4da1-4ffa-b6b1-a74fd3ee74a0&token=b5110156-e95e-4f88-85be-5fb957c69a1d&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=bd9b3276-b89f-4c09-ab29-aaa63c0f4aca&token=8e40b0e4-b25a-409c-b742-d03731af3a82&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=550ce346-3a15-43f2-a56f-6292b8134230&token=69c232e5-fe9a-4eb5-9d4a-9dd24ee663d0&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=d081dc4e-44fe-490a-a343-74d73ff947f9&token=af4479ce-097d-4f30-a658-96bdc316085c&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1d6eacb5-3822-4272-9b73-d5c0b7078317&token=b7267658-9e8d-452c-9cfa-994b54c91cca&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=75e25351-b653-4d9b-9bec-460c6004fbc8&token=c5a04db7-85a8-489d-9dc9-6aceeef6c663&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=7dc3284b-8837-48b4-afc0-f9e8060e4175&token=a4dab45c-2958-48a2-ba6e-d2e9d3c85c00&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7a00366c-5116-412d-bfd1-f08d9922c006&token=088a8f79-ba3e-48ed-aab8-cb21394b71bd&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=07056b29-c312-4291-9f02-f3c79ae74176&token=2b6d09a7-c8ee-4165-8603-87033c31e3b0&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=6fce210d-f250-4a2c-8e8b-dfaa4656c63c&token=b00705c6-7812-4518-84ab-5533b832ecfa&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=aee2d70d-987b-4287-bdc6-885dce79502a&token=92a9b43e-07ba-45f7-80d4-acc2388735f6&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=705acfce-6571-46ce-87ff-bac69a99dc2e&token=574ecbfa-dde0-49b0-904b-4b0965cefdc2&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f5d081e7-abe4-4f96-8bf6-458ff9af6ae9&token=3d46f816-26bd-473a-8343-e33a603e3381&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b8cca9fd-4817-42cd-bec3-4fe46220ba47&token=5fcbcd3b-bf4f-4044-9e91-f86fa5b23eb9&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d244c5d7-5e2b-4700-bb92-19420906a583&token=2ccf3864-27de-41f5-985c-6381d9787bf8&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8b527322-0444-45fa-9393-606f291662bc&token=2ae53346-97cc-43cf-80d0-b8e6ce5ccd11&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=d2f84d3c-500f-4580-ae9f-115743774cb2&token=8bd67a68-9566-4e77-805f-0305c7907234&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=58c56b67-0c42-45a9-8c14-203cef01bb6f&token=b9b600b7-0b64-4bba-972c-1279494904e0&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3dcbd601-d536-4d1c-b745-3d271c5ea391&token=33ecd92f-25af-4cf8-8ed7-0806c1f1805a&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=f3accc29-9c2d-476e-bcd6-84efec61cb51&token=902cfcf7-f05d-472b-ac3a-6b986b485eed&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9874cb86-7f8c-4d17-84ff-5e42687cd4a2&token=7463e664-d02a-43ef-9b7e-2aa60b20596e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d12b2c49-8e6e-4aa4-bcb9-7773876918e5&token=bba85cae-800e-4ff6-ac7a-8252c271676e&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e3492e06-6ac5-4658-a6ac-12899caee589&token=2b6f88b9-2139-4b43-996e-e7b91da8352a&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3b85f25f-2430-407e-8a39-f5d1fa2b8e3c&token=8b37a803-db83-434e-9dbb-630589ddf9b1&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e09996b6-25e5-4852-9db1-bb704001290f&token=ac3a96aa-7241-4f62-81e4-700acf2a0f80&version=O15GA&source=O15OLSO365&B=0

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=bf348d8a-2bc4-4b8f-b48e-48c2c4561471&token=b9624f2b-10b5-4aba-bb21-515630e3e37c&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=a92ec47b-d7f8-4598-9f5b-62ec008d67e0&token=0c53d753-7642-4907-b2ea-05bb2d6a9ad3&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-us&TaxRegion=pr&correlationId=ecb837ac-1a8a-41e4-8694-698b9c4d55f7&token=6140d787-554c-48e2-a07d-9f7524888937&version=O15GA&source=O15OLSO365

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=114f1c11-cf5d-4bf2-9b2f-dcbeb611043b&token=10b2ef15-2d01-4488-9bec-67b655089a3c&version=O15GA&source=O15OLSO365&B=3

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365ProPlusRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1fdb7209-00ac-435a-8369-13a5a41beaa2&token=b122c713-3040-4ee8-942c-f16bca3f596d&version=O15GA&source=O15OLSO365&B=3

Latest 30 of 1,165 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.