Gridinsoft Logo
File Icon

The O365ProPlusRetail.exe File Analysis

Updated 1 month ago
Checked by Malaware Check
O365ProPlusRetail.exe

Technical Analysis

File Name O365ProPlusRetail.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-06 07:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
7,555,032
File Size (bytes)
2025-05-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
469c0d78d1261e02077af579ecde8526
SHA1
9eec18714e6a0dd90056985c48bbe8afc00238f6
SHA256
f0fa41fd2b9692b3213ec455336e1e78f8be22c33ee827deac8ce5ae7c3676db
SHA512
b948f9c95a60d49885fb4fa1fe6a3540f060e4089d7ddd5da4f9c86a5cd6dd00157648df183838700a6c252bc17b793bc5df07c77edfc831abee6d6aa46d9ccb
ImpHash
d57a76798d91c4f768945e96bf235bea

PE Analysis

Basic Information

▼
Icon
Hash: 391f811855bf0bc99d7dd2e6c27b6f80
Fuzzy: 99819d86401a69c8b8715607db9d5222
dHash: 70e4868c8ce6f870
Image Base 0x00400000
Entry Point 0x007e3a33
Compilation Time 2025-02-08 11:26:35
Checksum 0x00734e8c (Actual: 0x00739acf)
OS Version 5.2
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path d:\dbs\el\omr\target\x86\ship\click2run\en-us\SetupBootstrapper.pdb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Digital Signature OK
Imports 7 libraries
ADVAPI32, ole32, OLEAUT32, GDI32, KERNEL32, SETUPAPI, gdiplus
Exports 0 functions
Resources 69 Resources
Sections 6 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft 365 and Office
FileVersion 16.0.18429.20158
InternalName Bootstrapper.exe
LegalTrademarks1 Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2 Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename Bootstrapper.exe
ProductName Microsoft Office
ProductVersion 16.0.18429.20158
Translation 0x0000 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,563,222 bytes 4,563,456 bytes 6.70 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 80A8439C70726B90D7AF4E602DF026A4
.rdata 0x0045c000 2,052,332 bytes 2,052,608 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9FC6E20C2994BFF7F7365F405389ACC1
.data 0x00652000 215,596 bytes 184,832 bytes 4.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F120339323251AAAB0BF9CAC37FE6A7C
.fptable 0x00687000 128 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00688000 350,540 bytes 350,720 bytes 5.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 828F906BEB54DE54803600DC3C618BDA
.reloc 0x006de000 379,496 bytes 379,904 bytes 6.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6333781CCC7F52818611395713EDA105
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 69 (345,574 bytes)
Resource Type Count Total Size Percentage
PNG 48 35,463 bytes
10.3%
RT_ICON 4 285,408 bytes
82.6%
RT_STRING 14 21,760 bytes
6.3%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 1,072 bytes
0.3%
RT_MANIFEST 1 1,809 bytes
0.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware