home

x17-30021.exe

Microsoft Lync 2010

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from www.microsofthup.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Lync 2010

Description:
Volume Bootstrapper for Microsoft Lync 2010 Installer

Version:
4.0.7577.0 built by: lcs_se_w14_main(rtbldlab)

MD5:
e883e87093ada0902d4f8c3c5cec90e7

SHA-1:
b8c8215cec2124bc6a9d4ce09d830f06bfbb09fa

SHA-256:
e8dfef49bb15d70a025ad42b49819844d70f3250285a1f01f1cce2451f0d9760

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 10:36:34 AM UTC  (today)

File size:
53.4 MB (56,019,736 bytes)

Product version:
4.0.7577.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
LyncSetupVolume.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\x17-30021.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/19/2010 3:53:10 PM

Valid to:
10/19/2011 3:53:10 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108775F00000000004A

File PE Metadata
Compilation timestamp:
10/22/2010 3:02:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:bWN65eG8UXTZoX0edb1NRFisSv4iPaEVm3cvDn:bWY5eNUXTZoxb1rFZZiy6gcvT

Entry address:
0x81AE

Entry point:
E8, 1E, 20, 00, 00, E9, 74, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, DC, 83, 41, 00, 75, 02, F3, C3, E9, A0, 20, 00, 00, CC, CC, CC, CC, CC, 6A, 0C, 68, 90, 6B, 41, 00, E8, F7, 1D, 00, 00, 33, F6, 89, 75, E4, 33, C0, 8B, 5D, 08, 3B, DE, 0F, 95, C0, 3B, C6, 75, 1C, E8, 2B, 27, 00, 00, C7, 00, 16, 00, 00, 00, 56, 56, 56, 56, 56, E8, A9, 26, 00, 00, 83, C4, 14, 33, C0, EB, 7B, 33, C0, 8B, 7D, 0C, 3B, FE, 0F, 95, C0, 3B, C6, 74, D6, 33, C0, 66, 39, 37, 0F, 95, C0, 3B, C6, 74, CA, E8, 05, 24, 00, 00, 89, 45, 08...
 
[+]

Entropy:
7.9645  (probably packed)

Code size:
91.5 KB (93,696 bytes)

The file x17-30021.exe has been seen being distributed by the following 16 URLs.

http://www.microsofthup.com/.../unitdownloader.aspx?receipt_id=110682841&culture=en-US&id=g506f6431hfeb86ff19fbf4aa0b29ef2c8f295e35b&dname=English Lync

http://www.microsofthup.com/.../unitdownloader.aspx?receipt_id=309467474&culture=en-US&id=g506f6433h4b12a2d6649248b5a5aa4cc773e62a9f&dname=English Lync

https://webstore.illinois.edu/.../order.aspx?itemid=516330

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-GB&id=g506f643134h9a4d62b44d044f44bbcf2c233800926f&receipt_id=575385333&dname=English Lync

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f6433hdfa0154a8dfa4769b73bbcacdfe1bfb4&receipt_id=309729169&dname=English Lync

https://sftp.connectionseducation.com/.../ISAPIFilter.dll?9095667f-73e7-4047-b4ff-eeb0f199d669

https://www.microsofthup.com/hupus/telproxy.aspx?tel_link=https://drcdn.blob.core.windows.net/.../X17-30021.exe

http://www.microsofthup.com/.../unitdownloader.aspx?culture=en-US&id=g506f6431ha80ba87ef654491aae3a6106194c9f85&receipt_id=110705858&dname=English Lync

http://msft.digitalrivercontent.net/01/541681777-10238044--EUR//.../X17-30021.exe

http://azcdn01.digitalrivercontent.net/.../X17-30021.exe

http://mspace.utep.edu/lync/Clients/.../LyncSetup.exe

http://msft.digitalrivercontent.net/01/308662041-10238044--NOA//.../X17-30021.exe

http://msft.digitalrivercontent.net/01/108939463-10238044--NOA//.../X17-30021.exe

http://msft.digitalrivercontent.net/01/309709673-10238044--NOA//.../X17-30021.exe

https://winportal.tuev-nord.de/sites/swint/Docs/_layouts/download.aspx?SourceUrl=/sites/swint/Docs/Software/Lync 2010/.../i386/LyncSetup.exe&FldUrl=&Source=https://winportal.tuev-nord.de/sites/swint/Docs/Software/Forms/AllItems.aspx?RootFolder=/sites/swint/Docs/Software/Lync 2010/.../i386&&AuthResend1908BC2350124b5095AB75012FA405BA

https://winportal.tuev-nord.de/sites/swint/Docs/_layouts/download.aspx?SourceUrl=/sites/swint/Docs/Software/Lync 2010/.../i386/LyncSetup.exe&FldUrl=&Source=https://winportal.tuev-nord.de/sites/swint/Docs/Software/Forms/AllItems.aspx?RootFolder=/sites/swint/Docs/Software/Lync 2010/.../i386&

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.