officereports.exe

OFFICE REPORTS ApS

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com.
Publisher:
OfficeReports  (signed by OFFICE REPORTS ApS)

Product:
OfficeReports

Description:
Setup Launcher Unicode

Version:
2.01.0022

MD5:
dbfe7625a5496edcc2afa26dc87cb868

SHA-1:
acd2cc8c69730df696495fa9cb17344f2ba9585e

SHA-256:
2c0ee47bbc6689215e342a7334d5071abb1a8842fbb9001bcf2365b6ce835317

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:43:45 AM UTC  (today)

File size:
39.8 MB (41,682,136 bytes)

Product version:
2.01.0022

Copyright:
Copyright (C) 2011 Flexera Software, Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
InstallShield Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\officereports.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
8/25/2011 2:51:27 PM

Valid to:
8/25/2014 2:51:27 PM

Subject:
CN=OFFICE REPORTS ApS, O=OFFICE REPORTS ApS, L=Copenhagen, S=Copenhagen, C=DK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121AD7C9079E41B23DAF0FC89BA9ABD2271

File PE Metadata
Compilation timestamp:
8/22/2011 10:25:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:V+Yo4bs/u2A/+yTbG/2ti4NA0Xs3rOoBjwvZXi9Z7KXPLdGxcn3W6:V+j4bsRG+L2+0Xs7Oo+ZX87IGW

Entry address:
0x9826B

Entry point:
E8, 4E, 28, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0...
 
[+]

Entropy:
7.9946  (probably packed)

Code size:
905.5 KB (927,232 bytes)

The file officereports.exe has been seen being distributed by the following URL.

http://gsf-cf.softonic.com/acd/2cc/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3340843&instance=softonic_en&type=PROGRAM&Expires=1442340343&Signature=b~Kp-BDAoZnraemRyoR3T39R~ggUIfnaEyLarGjB5es7CTLUcrEaftHq6FctlWx8HV8aGVuKtkJtJrcuszZ4~p7fCXXVLhiZGGHMMtY9czduVjMn1hIl2nBh8VrpKE3oKJS6D3wXNCptuKu~Pgy8G0W2RgQIRleFBTJ3ZIG1re8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OfficeReports.exe

Scan officereports.exe - Powered by Reason Core Security