Gridinsoft Logo
File Icon

The Setup.X64.es-ES_O365HomePremRetail_001a94d5-9257-4d7b-80a6-dce1a0d145d0_TX_DB_.exe (Microsoft Office) File Analysis

Updated 29 days ago
Checked by Malaware Check
Setup.X64.es-ES_O365HomePremRetail_001a94d5-9257-4d7b-80a6-dce1a0d145d0_TX_DB_.exe

Technical Analysis

File Name Setup.X64.es-ES_O365HomePremRetail_001a94d5-9257-4d7b-80a6-dce1a0d145d0_TX_DB_.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-07 05:00:18 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
8,129,952
File Size (bytes)
2025-05-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bd309428787046b526fbcf562a241efb
SHA1
2d98f1c1bebf0b6c6a256583ff2e64c550fe2f7a
SHA256
ee5671232517b834d09b1166dca3746be72eb64fdfdeee7cab1e5e68971d4170
SHA512
26fd20e7852217090306a74af6be00d12d657c92ab5b7bd02624b2ea1c1fe2bc556a5fd7b3b65a94b52f21009a3d8c9ae67a74db92db43f37fc111302dbb36d9
ImpHash
1b52c159a42a9b0be6a17194b513c622

PE Analysis

Basic Information

▼
Icon
Hash: cf8b3d44cc80ac3d3f5b2c3f6848133a
Fuzzy: 71fcd2e860bbcd562ce257f969072383
dHash: e0c8ccc6c6c6c0e0
Image Base 0x140000000
Entry Point 0x1403ca850
Compilation Time 2019-12-05 23:22:37
Checksum 0x007c56b7 (Actual: 0x007c56b7)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path d:\dbs\el\oct\Target\x64\ship\click2run\en-us.pre\Bootstrapper.pdb
Digital Signature OK
Imports 10 libraries
GDI32, OLEAUT32, ADVAPI32, KERNEL32, ole32, WINTRUST, SETUPAPI, WS2_32, gdiplus, RPCRT4
Exports 0 functions
Resources 76 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft Office
FileVersion 16.0.12228.20364
InternalName Bootstrapper.exe
LegalTrademarks1 Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2 Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename Bootstrapper.exe
ProductName Microsoft Office
ProductVersion 16.0.12228.20364
Translation 0x0000 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,611,548 bytes 4,611,584 bytes 6.40 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C2454EE4EAA66BFE310742218E690932
.rdata 0x00467000 2,408,902 bytes 2,408,960 bytes 4.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 96EEFE7A0213450F167839FB3417A2D4
.data 0x006b4000 195,684 bytes 111,616 bytes 4.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 15B4D753108C58296F558EFE0F2C21C2
.pdata 0x006e4000 183,840 bytes 184,320 bytes 6.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DE45BCD685F78AA2D570730F258508A8
.didat 0x00711000 1,496 bytes 1,536 bytes 3.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E088B3377C71EC9C56A62B7A5CAF54A4
.rsrc 0x00712000 659,456 bytes 657,408 bytes 7.31 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 291582B8AA2D75B09F36C8FBBAD842FA
.reloc 0x007b3000 134,000 bytes 134,144 bytes 5.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D416E11CCE25085DF269858E5FCB7802
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 76 (652,491 bytes)
Resource Type Count Total Size Percentage
PNG 26 504,812 bytes
77.4%
RT_ICON 4 82,656 bytes
12.7%
RT_STRING 43 62,096 bytes
9.5%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 1,056 bytes
0.2%
RT_MANIFEST 1 1,809 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft Office
Description Microsoft Office
File Version 16.0.12228.20364
Original Name Bootstrapper.exe
Signing Date 08:10 AM 12/06/2019 (2008 days ago)
Verification Status Signed
Signers Microsoft Corporation; Microsoft Code Signing PCA 2010; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name Bootstrapper.exe
Certificate Chain Summary
Microsoft Corporation #1 Primary
Validity Period: 2019-05-02 21:25:42 → 2020-05-02 21:25:42
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 02 CF 6D 2C C5 7C AA 65 A6 D8 00 00 00 00 02 CF
Microsoft Code Signing PCA 2010 #2 Chain
Validity Period: 2010-07-06 20:40:17 → 2025-07-06 20:50:17
Signature Algorithm: sha256RSA
Serial Number: 61 0C 52 4C 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2019-11-13 21:40:42 → 2021-02-11 21:40:42
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 21 F7 B1 81 9B 23 44 D7 0C 00 00 00 00 01 21
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2010-07-01 21:36:55 → 2025-07-01 21:46:55
Signature Algorithm: sha256RSA
Serial Number: 61 09 81 2A 00 00 00 00 00 02
C2RBootStrapperData #5 Chain
Validity Period: 2016-05-24 23:39:44 → 2039-12-31 23:59:59
Signature Algorithm: 1.3.14.3.2.29
Serial Number: 32 00 92 AF D5 91 7A 9E 4F 43 2A 6D A3 58 1C AB
Microsoft Corporation #6 Chain
Validity Period: 2019-05-02 21:37:54 → 2020-05-02 21:37:54
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 55 F9 D5 DC 67 86 67 B1 07 00 00 00 00 01 55
Microsoft Code Signing PCA 2011 #7 Chain
Validity Period: 2011-07-08 20:59:09 → 2026-07-08 21:09:09
Signature Algorithm: sha256RSA
Serial Number: 61 0E 90 D2 00 00 00 00 00 03

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware