home

officesetup.exe

Microsoft Office 15

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4535.1507

MD5:
d97c668eaa67de4c14a4008b3c65251e

SHA-1:
80c53193f9788c22b0fb591ab3496a167a84b43d

SHA-256:
1f863bee2b64bce044c17f99b8889cdb5effe7dd2a33546b84634df06c1dace0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 7:22:29 PM UTC  (today)

File size:
558.7 KB (572,088 bytes)

Product version:
15.0.4535.1507

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\officesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 5:33:39 PM

Valid to:
4/24/2014 6:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
9/5/2013 2:46:46 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:V9ak0lWa6X8xg6IlPQXwdlUnmXTwytfR4J:Vsk0lWa6Xog3swTUnmXTT9R4J

Entry address:
0x44237

Entry point:
E8, 6A, 4C, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, E7, 18, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C0, 11, 40, 00, 57, FF, 35, 48, FF, 46, 00, FF, D6, FF, 35, 44, FF, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 97, 4D, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 25, 4D, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
5.7676

Code size:
415 KB (424,960 bytes)

The file officesetup.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=72ab4b1f-d70e-4e88-978b-0014880f5783&token=8856cda7-fc5e-44af-9330-6f33b6086dcd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=f31db22b-44e7-4583-88c7-8f37d9ae336a&token=b1a2599c-1957-44a6-b2b8-106927b43da1&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8d1034b2-c289-4693-ab6e-52ff32e59015&token=b308b51d-8977-4238-954b-3cbe742253d7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=df721c8f-2ae2-4079-a472-99619526d8cf&token=aa2ec030-7395-432c-a3ef-35b175826cdd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=4101d458-90c9-4009-b25a-02adb114056f&token=f50f27e7-bf96-4463-9ac7-62fbf855d8bf&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=4c7cc01c-dbeb-4048-81b7-b5d99a3701d5&token=d4925fb0-f4d3-4e53-b5eb-ec705aa741bd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b6d5a819-0806-493e-8eb1-506b4e504a66&token=e2d16433-a4fa-4207-baa1-09d31311ba7a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=c95882e7-4d59-49c3-8682-4b41ea067e0f&token=992a6bb8-0fde-4f4c-a0d3-52d2164fdea1&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=f59eac07-dcc8-487f-aa23-6c9356138883&token=95b70abb-c2b9-4293-a2ca-a5819cd70d02&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=d1f645f3-5b9b-4f4a-84f6-d837e20fd2fa&token=1a723498-f690-43a7-9662-d9eea5008279&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=09a9d9e7-aa5e-457e-b960-44ea7d9256bc&token=bf2aa141-985e-4985-b3c8-061c53821f74&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=1b710065-2c44-44a8-bf06-68400548c68c&token=9dcd4c56-73ba-4bdd-a61b-29500b26450c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2166ab83-ad45-4bdc-8883-2b445f1c141e&token=9c23346f-4575-401d-a025-693ee546519e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=62a47108-64db-4c91-af37-2ace589be587&token=0f24df0e-fcb2-4b11-9ee5-fd4a6a8fcba9&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9b60f00c-04a7-4a8e-96ee-f5096c356b21&token=f030d885-8781-4334-8696-f44a1bf865ff&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=c73ae942-0e3e-47b6-9a6d-5d8ed4742e83&token=eb9bf71b-4945-4409-803b-b1d366810cb3&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=609db16a-c294-4954-b23f-f1c5409476f2&token=f54bd46c-e79f-4922-bf9a-15a46e93d783&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7fd66b4f-c6bb-4eaf-ba7c-322e83169315&token=cb192c66-e7fb-4f2f-a835-7ea005d9b663&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=8cf73910-11fd-45c8-b25f-3b317b5d9958&token=c01138d0-56da-482b-be6e-9d93ef510dcf&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=9235d940-a975-4847-8c10-09848a6156f0&token=3f0d2b65-d297-4d9a-af19-79c18078da3b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=7258e300-4ce5-4abb-be98-40836304ad59&token=b0c4bf6c-58e8-4c7d-ad79-8114113c2732&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=110c234d-7bf9-42a3-934c-f2fa3c76a39e&token=2c00269c-9c0e-4d7a-bc2b-5222b75baac8&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=073e7284-a44f-4774-8b58-7f0f5f271b7d&token=2b2c2de4-e566-4083-87b1-ed29b824cd51&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=8f57d801-787b-420f-8909-b16687bb1e11&token=8190e37e-d39c-4906-aa6f-762f43394ed3&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=01569861-d9d1-4f16-a67b-d79233eafdf3&token=c30a9d02-c71e-4b8a-81ba-60b5a88eea05&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c65fc666-3153-4435-bd01-8c0a04353b7f&token=f3bcd12e-4de1-42f7-beea-5fdc625cb07b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5463f629-57a4-49b7-9fa5-cec40b4ad1d9&token=30ebd55d-8dc4-4c22-8f4c-58a33fbac29d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9ff54bc5-260c-429d-9696-daa660f63c9f&token=038df526-b71b-4295-9a76-18792f2e54f2&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=6a6e517b-7b58-463f-9fc2-58b25296dec9&token=e8386e8e-0a3e-441f-927b-d6488b187f58&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=fb89618a-e35e-43e7-acbf-2cc8049a559e&token=32eb7422-6504-455e-b204-0ff890be7eba&version=O15GA&source=O15OLSOMEX

Latest 30 of 385 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.