home

setup.x86.en-us_proplusretail_64grn-fxw8r-k8647-hxj3t-cgyvh_tx_pr_act_1_.exe

Microsoft Office 2016

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.6001.1041

MD5:
9d9507a6e8ccbfb83707cfd4f7ba9f86

SHA-1:
d4e5d24d71bfb576ca0aa1199a63567de58d3f7d

SHA-256:
87c073740f09d8c6c8b4409fd646ee8b9485530d4f511cc47fd2de2282dc9b3d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 3:09:07 AM UTC  (today)

File size:
2.9 MB (3,058,856 bytes)

Product version:
16.0.6001.1041

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_proplusretail_64grn-fxw8r-k8647-hxj3t-cgyvh_tx_pr_act_1_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 12:42:45 PM

Valid to:
9/4/2016 12:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
11/11/2015 5:41:22 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:XUkX8sV/q8jEYxnmkd3P6FqyXIDylcgs5NfBqeTZATTsxoNUSyjwYWlkssvNEPn/:DMsV/q84WnmkpCFayls5NfBqo+SwY2s+

Entry address:
0xCD906

Entry point:
E8, 78, 12, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, C7, 16, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 88, D8, 63, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0, 8B, CA, F0, 0F, B1, 0E, 85, C0, 75, F0, 32, C0, 5E, C3, B0...
 
[+]

Entropy:
6.5869

Code size:
1.4 MB (1,505,280 bytes)

The file setup.x86.en-us_proplusretail_64grn-fxw8r-k8647-hxj3t-cgyvh_tx_pr_act_1_.exe has been seen being distributed by the following 47 URLs.

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h52cf0467d496404689c8b54ac276aeb2&receipt_id=865499281&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=SG&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=YPHRN-WYRFR-PQ3JF-GQ3K7-HXMVH

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h5964b753056845d18c7ad99a0a7b1918&receipt_id=865505037&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h2f199de873094523988d4737ed48b673&receipt_id=865515501&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-CA&id=g506f64303932hab4f281836fb4901bdd88782958a5d19&receipt_id=552126883&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hea582c2fe926439db64fe15916be1b3b&receipt_id=865481739&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h5f892131fbeb4aaf81d5a035d2582d5e&receipt_id=865470999&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h7268c224411e409b8d608b26a1736a1b&receipt_id=865488034&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h5447cd21a2524b5ab02a5b25e57bddf0&receipt_id=865513986&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h290cb4952b8d43fd9f1df4b3f60fcb46&receipt_id=844631455&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234haefb86cd24484b6b8d80a431bfcc8488&receipt_id=865510952&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=TFTN2-6YJDD-KFTYY-K4QBK-DYH7H

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235hd378b06bc3b2488893bf741634590e15&receipt_id=844646697&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hcf6c952dd5d5461ebe9d56efbed837ba&receipt_id=865253961&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hcf03c9928ecd4b9cb4925397c3737e93&receipt_id=865477787&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h86233c47b113450497b7e141b7ce3ef2&receipt_id=844633827&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hfc8dd16104e44d45a5e7b7719a6ae967&receipt_id=552141354&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hbf94569a2da84bb1b959f724802d737e&receipt_id=865508609&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hdeb7a62a87964846a63a22d9f28a329c&receipt_id=865485072&local_only=true&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16HUP&act=1&language=en-US&token=3J4KF-QN86H-697YV-P4GGQ-4GDK7

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=QVTTY-82NPM-YPTWT-HFJCJ-YP2QV

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hce9120aba0d0444aa31ff4a092027cbe&receipt_id=865494374&local_only=true&dname=O16.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234hd0805b72449e47279a3737e3abbea0b7&receipt_id=865507981&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=IR&platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16HUP&act=1&language=en-US&token=8YNQ6-DRMGT-6Q2MD-F44VW-9TPQV

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h977c82fc15a24e0a8e46fa057e8828ff&receipt_id=844632077&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=BNTYD-9DYHR-KC68K-XGKFR-W8GDV

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h7be81ced757f40f786623e5623df7c75&receipt_id=865510048&local_only=true&dname=O16.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=IR&platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16HUP&act=1&language=en-US&token=6PCN9-QCH3H-7QH2R-GY97C-BTDK7

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&&Language=en-us&Platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16VLAP&token=8KN7B-3M7DK-M6KTF-PGMVC-P9XX7

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O16GA&Source=O16HUP&act=1&language=en-US&token=NF6G8-KFQ2K-MHFWR-XPCPY-VQW3V

Latest 30 of 47 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.