home

setupproplusretail.x86.en-us.exe

Microsoft Office

Microsoft Corporation

This is installed with Microsoft Office 365 ProPlus - en-us. The file has been seen being downloaded from c2rsetup.officeapps.live.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4719.1000

MD5:
682afedfea2ee095510a93e7bbd2a9df

SHA-1:
1bf5b6165bebe6a8fabbc7b2c1755bdc7dbdab35

SHA-256:
14633c9c42be173d8195486ed5d6d64136c96920ae7d2bdc30c582f5ba83ea92

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:31:52 PM UTC  (today)

File size:
1 MB (1,082,040 bytes)

Product version:
15.0.4719.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setupproplusretail.x86.en-us.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/22/2014 1:39:00 PM

Valid to:
7/22/2015 1:39:00 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
4/14/2015 6:53:14 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:HQiB/UaTP5ZrMFNHGfZUl7g7s16y7dG8sfwBL3kVPZqs4Ve:HQiB/UehtBI7g7k0pyL3w0s44

Entry address:
0x5E8E0

Entry point:
E8, 84, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 54, 12, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C8, 12, 40, 00, 57, FF, 35, A8, 40, 4E, 00, FF, D6, FF, 35, A4, 40, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, AE, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 3C, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1793

Code size:
868 KB (888,832 bytes)

The file setupproplusretail.x86.en-us.exe has been discovered within the following program.

Microsoft Office 365 ProPlus - en-us  by Microsoft Corporation
appinfo.micron.com
1% remove it
 
Powered by Should I Remove It?

The file setupproplusretail.x86.en-us.exe has been seen being distributed by the following 32 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&language=en-US&TaxRegion=IR&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&platform=x86

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234ha3809c20dfc34c799c71b850bd374425&receipt_id=864895710&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&version=O15GA&language=en-US&Source=O15HUP&ProductreleaseID=ProPlusRetail&platform=x86&act=1

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235hbfa8f5defbb44d65b6eecfa9c6b9f968&receipt_id=844014241&local_only=true&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303233h52fa20ef695a4db2a0ed405a557be7c8&receipt_id=862841638&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O15GA&Source=O15HUP&act=1&language=en-US&token=JX74Y-TNCXD-VTV27-2JYMT-H8PDD

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&language=en-US&TaxRegion=IR&Source=O15HUP&platform=x86&version=O15GA&ProductreleaseID=ProPlusRetail

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-CA&id=g506f643133h6169ba372d6347738c07bcbc745a9047&receipt_id=548484348&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235hcf8d261add64439ab85600d3d902e9e5&receipt_id=844011344&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303932hf9998a7a9ae14771ba78179cd67c13a0&receipt_id=551467052&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=IR&version=O15GA&language=en-US&Source=O15HUP&platform=x86&ProductreleaseID=ProPlusRetail&act=1

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&platform=x86&Source=O15HUP&version=O15GA&ProductreleaseID=ProPlusRetail&language=en-US&TaxRegion=PR&token=XKVNX-GMYMH-HBTDD-7D443-628QD

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h269287b59931450db40cd94797be7f85&receipt_id=843943522&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h49327c234d5b4f5c9c84cbba754a685e&receipt_id=864877137&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&language=en-US&TaxRegion=SG&Source=O15HUP&platform=x86&version=O15GA&ProductreleaseID=ProPlusRetail

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&TaxRegion=PR&Source=O15HUP&Version=O15GA&language=en-us&ProductReleaseID=ProPlusRetail&platform=x86&token=RCJJM-NM8MR-R6VRC-83XHH-HXJQD

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O15GA&Source=O15HUP&act=1&language=en-US&token=J2TQR-NQ6GF-P8D2P-XDRWJ-D9JQD

http://www.microsofthup.com/.../unitdownloader.aspx?culture=nl-NL&id=g506f64303932h20d96a7c4ade4612bf36b18d8d58032b&receipt_id=550464938&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h63946be8c752455993128e607f830bee&receipt_id=864872672&local_only=true&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h148121cf015c4886a0f53977f45abb20&receipt_id=864276318&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-GB&id=g506f64303931h410fc4f1f78e42469b52a3e2c4104105&receipt_id=476509028&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h9899712383ab4434823ffc3142d3644d&receipt_id=844020235&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&version=O15GA&language=en-US&Source=O15HUP&platform=x86&ProductreleaseID=ProPlusRetail&act=1

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235hd32f84f15600449cb046f0523105eace&receipt_id=844005577&local_only=true&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?TaxRegion=PR&platform=x86&ProductreleaseID=ProPlusRetail&version=O15GA&Source=O15HUP&act=1&language=en-US&token=D4KXK-N3JC8-CY6MT-XHFWT-KTKKQ

https://doc-00-64-docs.googleusercontent.com/docs/securesc/j5g9o5499pvodriiok2g99r1g8sffsd5/ktdm1v74hb2oehhspv202olm9jkd4rpb/1451440800000/.../12265319812313785914/0B72Q5ETyjEJRdlRkN0IyTDlFMEU?e=download

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303234h35efcfa57ee64c549a26e60a219bc20e&receipt_id=864848185&dname=O15.download.name.32

https://c2rsetup.officeapps.live.com/.../download.aspx?act=1&language=en-US&TaxRegion=PR&Source=O15HUP&ProductreleaseID=ProPlusRetail&version=O15GA&platform=x86&token=N7C8W-F676H-8QPPF-T77QQ-C343D

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f6432hfd2c67438b224fe293907b4a07007fa0&receipt_id=212649023&dname=O15.download.name.32

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f64303235h98d839da640f49d2be57f47e962dfc1f&receipt_id=843855895&dname=O15.download.name.32

Latest 30 of 32 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.