home

officesetup.exe

Microsoft Office 15

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4551.1001

MD5:
3d5f5f879efff44aa4df39ee0ccddd12

SHA-1:
0abcb8554e2bf17b9760224e3ce0a40683ef1318

SHA-256:
ad11d3825f80d25038c5feaa8432845692893d180ba737f94cc878c9fde7bf6c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 4:17:39 PM UTC  (today)

File size:
558.7 KB (572,088 bytes)

Product version:
15.0.4551.1001

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\officesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 4:33:39 PM

Valid to:
4/24/2014 5:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
9/14/2013 2:16:21 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:d9aCPWow6K8+6t/lPQX0dlbnmXTwFcfR4M:dsCPWow6Kb63s0TbnmXTgKR4M

Entry address:
0x44237

Entry point:
E8, 6A, 4C, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, E7, 18, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C0, 11, 40, 00, 57, FF, 35, 48, FF, 46, 00, FF, D6, FF, 35, 44, FF, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 97, 4D, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 25, 4D, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
5.7677

Code size:
415 KB (424,960 bytes)

The file officesetup.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9acf9227-63b1-4016-90cc-681a5d592191&token=a08dbd1d-c1b6-4823-bc63-7bed8c321616&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a618b9d0-1430-4393-8bdf-e81296e52c8a&token=645c8490-71d5-4b21-b285-423202712eba&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=42e239cc-26e2-401d-8e0b-6a90294a7cae&token=55b25d9c-2c77-4fdb-ba06-6e82649bfc67&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2f50b9ce-c911-42f0-826e-da3059307a04&token=b52612db-abdb-4e4e-873c-aa8572147937&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=6fcf231e-82ab-4ebe-9737-e4286aecc202&token=ca27f5cb-ea55-4fb2-98cc-a4a09429ec65&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=3a7e6fc0-4aaf-46a5-92fd-0947dff5d7dd&token=24da8339-913c-41fa-b183-e996ef364a64&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=fabae494-be82-4802-b57a-f90e37e6a5ad&token=e4624db7-6e49-4607-ae5c-fc67c163a129&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f2a3b46d-1331-4e38-b7ca-4a3aeb7e2698&token=c3c1c4bd-6665-41e4-a34f-a410690e0585&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7b20034e-7a51-46d3-985f-41a66c245aa8&token=f4be1b06-0fe9-496c-ae08-69c21121608c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0e8cf757-e4a7-44e4-b5e0-4d43e7f7f43d&token=2b921ba2-112c-45a2-8c25-82ffcbfe918e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=cea1d18b-d2e0-4de1-b36c-fe0c1b883e3d&token=ff7d0579-e3be-4bc7-b965-dfe21ebbcaaa&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8ff69f5b-17de-45a5-82ab-213500b389b8&token=bc106aec-b376-4c4b-a982-0325e4e22fc3&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4c395b60-0e77-4024-b43b-acfaf3eb3a9c&token=a2010609-8c45-454d-a635-127fdf9dfd0a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2698dbd5-6670-4c52-be60-348f4acc609f&token=76af29e7-8b8d-4f2f-bfda-d3f278db37ac&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=58c9943c-8f6f-4375-a77c-f3d92e6dc0ca&token=5b450070-de3c-4fc7-9e0b-faaaba7da450&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f235dc64-9332-499b-847b-cf9d33a9f904&token=31bd8d67-ec98-4894-a53c-d42dc48a64c4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6c583a85-5f2c-49e1-8937-35fbb3143a17&token=e40f0387-3ebf-4334-9d07-ed82ffbdc384&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=1864d4eb-0c36-4179-838f-dc4fb8fa6ea2&token=8de9a936-513c-4957-ad0d-831b09442d04&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=df4210bf-4ef6-43c2-a6da-04640dc8bc22&token=ebe037cb-d9ca-458a-86c6-1fdfafb8d20a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=1a909b35-a256-4ec2-ae30-bb33dcd1d47f&token=0dcd98d5-070c-434e-ae68-85350a8a9b0c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5598006b-2eca-4738-9cbd-5ed29da1cf25&token=ddcc427a-80f9-4ff5-a867-185ef374dc5b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=737fb382-3340-4e13-a1ac-69fe27b4296b&token=a9a444f7-8535-4371-b089-6524fda2c44b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=554588be-c2df-4394-aa8f-bbc4eab1bf90&token=f29f3c57-07ad-4a4d-a9c0-916d887f2cf0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=aeab5058-cab5-4786-a5c1-d95871f8a420&token=d79a0952-e027-4b67-b4b5-5ea172bc095e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9dc7f71b-41f7-4add-9101-4954b39091b2&token=0b73499b-b106-4df7-834a-59d043df0e74&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=990eaf79-6ce1-48dc-941a-4d3a1b32fa46&token=4648b577-90cf-4509-8d48-2f02e28bca55&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=215c2f2a-434b-4f94-8dea-aebced87b9d0&token=a3da295c-2d33-493f-998b-a0d0865080be&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a618633a-5620-4560-a6eb-f6184401e9cf&token=22060f37-74a1-4810-99e6-3d1f4e75f58d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=385cf63c-5ac1-41ea-8324-3086d29e95b4&token=17aa5117-c465-4924-b4f0-271db23c8261&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=93c51515-38fe-4fc6-8362-6f6fe0dae2aa&token=b804576e-caa8-4d06-a5d4-790597f44ef2&version=O15GA&source=O15OLSOMEX

Latest 30 of 277 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.