home

x17-75062.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.softwareservice.cc and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
14.0.6023.1000

MD5:
a4e4fbb9348ce8a800cccb6ccfc9afc6

SHA-1:
6cf5049c1db90f8b799751583b9a2d5958905bca

SHA-256:
827669f5f0785ebc348cda708275a12b00a06474fa08fba075a66520568df47f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/24/2024 9:35:36 AM UTC  (today)

File size:
978 MB (1,025,493,776 bytes)

Product version:
14.0.6023.1000

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\x17-75062.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
2/21/2011 9:53:12 PM

Valid to:
5/21/2012 10:53:12 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101B29B000000000015

File PE Metadata
Compilation timestamp:
3/10/2011 1:40:07 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
25165824:6UiQw1HfDUNnCmDyN9itgm4rwEVGm1xoG:y/D6CKxtNEV

Entry address:
0x2EACD

Entry point:
E8, 6C, 3A, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 24, 03, 00, 00, 8B, FF, 51, C7, 01, 64, 9A, 00, 2E, E8, E4, 3A, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 1C, 3B, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 68, 9A, 00, 2E, 8D, 7D, E0, F3, A5...
 
[+]

Code size:
282 KB (288,768 bytes)

The file x17-75062.exe has been seen being distributed by the following 33 URLs.

http://www.softwareservice.cc/78ba7b19b6fed71354a7d2f42213dd32-129338-213794/.../

https://mega.nz/temporary/.../AIwWHRTJ

https://www2.buyoffice.microsoft.com/.../unitdownloader.aspx?id=g506f643133h206b4a1b85b94cae863f3cb86c7b0454&receipt_id=547786718&dname=O14.download.name.32&culture=de-DE&cache=-1264801503

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932he565c64c38264a678bad53166ea4f7bd&receipt_id=552410807&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932h36c04c6539d8457c9217c714ade8bc0c&receipt_id=552590333&local_only=true&dname=O14DL.download.name.32

http://www.pidservice.com/.../X17-75062.exe

https://u3069712.ct.sendgrid.net/.../click?upn=n0F6-2FWMDmqs3rEWyeQ-2Ft9mjCVGp9yPMmC-2FA98BSVXSJgrt6WW9W2Yab-2FxM2Kps5uFoTuKSiTzzhp0Bd6cq7tQUD-2FhQhtrOLy3L781YAUHQbnqYHsza-2B8qM5sW30B5tNk_ZnD0uZXxvb-2B-2B3dzcu0GPZa3G2m9lgSbVRNfEcJ9mEgFEWWAJs-2Bf65pF7poaoDCuow0sebb8lC0NVRufnDAxXBEHFUXzT0kq5wWu0euurjTbsaqXrx-2Bb8Sqg3c7JEbPX3aIEfB22I5Vc-2B4zk-2BlCk6vYv8TxyeJZ73qn9keg-2BLXOkUtai89RKk23-2FT4k4NU-2FYy5ZKRkhlgBwp7ZEXs-2BcsjIQ-3D-3D

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931hf76ddd7b508247c695bf807d9c122f25&receipt_id=476847971&dname=O14DL.download.name.32

https://www.google.com/url?hl=de&q=http://www.softwareservice.cc/5f040b15429742eb2e38f45097639675-119161-194211/.../&source=gmail&ust=1478848124996000&usg=AFQjCNEmxwstHHM6sART186SbAxNEfV3zw

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931hd1fd5715dd1f40aeaf12ec56ae797ecf&receipt_id=475627791&dname=O14DL.download.name.32

https://software-download.office.microsoft.com/.../Office_HS_2010_German_x32.exe

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=DE-DE&id=g506f64303932hab23f78da66f4986be78c9f964e8e271&receipt_id=551422306&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=DE-DE&id=g506f64303932ha700af5f73514644a788996e9ccf7c6b&receipt_id=552605904&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932had31e04ee876491dac108a8abd048cc1&receipt_id=550154278&local_only=true&dname=O14DL.download.name.32

http://www.lizengo.de/files/.../MicrosoftInstaller.exe

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932h71f7bd46ff9b42808e22c3218ee68c4a&receipt_id=552486793&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932hb617c7d2ea9941ab9f37bddc668a264c&receipt_id=552622396&local_only=true&dname=O14DL.download.name.32

https://www.hidrive.strato.com/api/.../download?id=Lcuvu9We

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931hf89fbdd98b234884ae84c6c741320c49&receipt_id=476980517&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931h94cac7745a5544db961a440058cd4f88&receipt_id=477280224&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=DE-DE&id=g506f64303932h74608efd53614e1e9817cdf983e4e29e&receipt_id=551919603&local_only=true&dname=O14DL.download.name.32

http://microsoft-office.softonic.de/download

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?dname=O14DL.download.name.32&local_only=true&receipt_id=549388279&id=g506f643133h0a8373a06afa40a3886743a0101e1dc9&culture=de-DE

http://msft.digitalrivercontent.net/01/440470647-10234671--EUR//.../X17-75062.exe

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931hfe5e75d176194dc2830db7fd01c88ce7&receipt_id=477341205&local_only=true&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303931hbb2f7f4a63404da69a0ffc6a59717568&receipt_id=475915053&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=pl-PL&id=g506f64303932h74badc952c074b89984a98836362cea8&receipt_id=551499095&dname=O14DL.download.name.32

https://www7.downloadoffice2010.microsoft.com/.../unitdownloader.aspx?culture=de-DE&id=g506f64303932hde052627959d41f39146d285f8a411ab&receipt_id=552322286&local_only=true&dname=O14DL.download.name.32

http://pos-einzelhandel.de/.../X17-75062.exe

http://download-web-shield.com/

Latest 30 of 33 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.