home

officesetup.exe

Microsoft Office 15

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4551.1007

MD5:
e9e6cb6504a39e4f86bab88cb81978d9

SHA-1:
22b94ebaedb603c90163ac8df3d2cf5e7fb70ccd

SHA-256:
2905412f142f222464d27d2e955c7dec5f6447e1fb36e9704f75bcf594ba130f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 5:01:34 AM UTC  (today)

File size:
558.7 KB (572,088 bytes)

Product version:
15.0.4551.1007

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\officesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/25/2013 2:33:39 AM

Valid to:
4/25/2014 2:33:39 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
10/30/2013 9:42:36 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:D9aCPWow6K8+6x/lPQX0dlnnmXTwdcfR4b:DsCPWow6Kb6Ts0TnnmXT0KR4b

Entry address:
0x44237

Entry point:
E8, 6A, 4C, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, E7, 18, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C0, 11, 40, 00, 57, FF, 35, 48, FF, 46, 00, FF, D6, FF, 35, 44, FF, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 97, 4D, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 25, 4D, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
5.7678

Code size:
415 KB (424,960 bytes)

The file officesetup.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=32a68e17-e6c5-482b-bc37-646493b3c134&token=cb0cec68-4d9a-4545-aafe-688048d71547&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=d5b89f58-91da-4933-a063-54227cc20e22&token=17f6c228-c2d5-427c-8955-641de17f0fcd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=18caab18-5fff-4aee-9d09-ec192ececdf2&token=f22ab202-e729-4d43-8768-36dee0d75417&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a718423a-bff3-40c3-8d7a-e6d4b64c93d7&token=08249f5b-5a41-4c41-a986-e0c20e5fc3e1&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=004dd690-c27b-4a6a-a5d2-69529e9c5134&token=26502ca2-6726-43ee-b089-0a75baf13aec&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4f5648df-eb13-4893-8fbf-dbdd57cc2c7b&token=667934d2-28ea-454e-9858-31d4d5881498&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=50edc194-d149-4f49-9f04-f69be37c0467&token=7cc7cab5-4812-47cc-9a8f-25eeb0205e54&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fdd9c27c-fbca-4aa3-a73e-4124f2125fb9&token=0acebf90-4fd4-467d-950c-6fb1d9a68ece&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=adea632a-c43d-4051-8c46-4bd9c26edf1b&token=69ec3bb5-366a-4888-b738-3e6a31947971&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=df8799ad-1d67-4b2a-8b19-233adab36bb5&token=b3d6ae2a-4759-4b60-85b9-779f02bbee47&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=01083deb-9716-433c-9f79-1ffbfa41ad33&token=fe8299d0-8dcb-471e-8ab2-b8131f92deb3&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=754fcd0f-70b8-4e46-8470-5bc39140f5b9&token=9c612017-e763-436e-8380-b8dc51e0ef90&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4c0de68b-86cb-4a37-b3cf-f02a49df5a5d&token=26236921-83d2-48d1-a37c-c9afa2ae6241&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=16083710-1e6c-4a5f-8502-0de5d2764749&token=fc255d15-6c07-4d4c-876c-3e688d0ddf0d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3c9b5caf-7ba4-4f2c-a53f-afe2688c2e19&token=f48fe51e-f53a-4045-a02d-01f9cc862435&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3e7db249-eb7f-4305-80ca-f4aeea2723d4&token=7e736ae7-d994-4929-9adb-1a3ffaf62a62&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e9f7182c-9798-42b8-841b-3177312ee156&token=4cdf66d7-f8ff-45e0-9ef5-c13ed9e874eb&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6bd3baa2-a790-4160-bc53-ef46b800a79b&token=79817bd1-d5e2-4eab-902a-624bb858a8d4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0e7fbb37-6bcb-453e-9953-26421c2d68c8&token=485e55c7-d750-4e48-b621-c05273705e6f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=e55c18c1-1cb9-4b52-a62f-cb88598602c1&token=443b0f8c-27f9-4fb5-b150-5bdc5cf4327c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=27b0cd4a-4841-42e1-8728-5e76aeb095fe&token=22d34eb5-ae61-43fc-a6f9-67b7652f1c28&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=730364ec-4d71-478b-88ca-4fae74de92d8&token=0bbcc1a5-922a-4f8d-b893-976fcd31383e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8c129d0a-b50d-4b7c-bce7-27bffcfe8f4a&token=13eac67e-bc7a-4d59-808c-8d696e69b35f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=fa07dadc-e220-4c72-b68f-9fe3f2fe1a0f&token=bcff493f-ca5b-4bb6-84ac-6efab14e4655&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=233274de-88be-473a-88e0-7839b45e3ba0&token=d4733338-a2e4-45be-94f3-73f5486a6fc0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8045d517-6d1f-4a5c-9c93-33cdcb91922a&token=cc0a59b1-954e-47d3-b121-283a01e1470e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=a859932e-5966-4005-80c7-88ef8c6ab147&token=b896cd50-bf26-453e-87a4-dcfac13ca457&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4d6f8e60-454a-478e-bc7e-38dc4b7bb757&token=3e6f3de6-9470-48bc-a2c8-0a993e0ca4a2&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0fb6f1df-c334-4ae7-a11c-4ada16e83804&token=dc25a882-af74-4009-9b8f-2fb6e8f4d54a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5c3286d7-5e5a-42d2-ad5d-6ecdd7ea66b1&token=b1606bf9-c3e6-48f6-8868-dfc12365a9f2&version=O15GA&source=O15OLSOMEX

Latest 30 of 402 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.