home

officesetup.exe

Microsoft Office 15

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 15

Description:
Microsoft Office Click-to-Run

Version:
15.0.4551.1507

MD5:
82e7f5488102c14364b4aef6601e387f

SHA-1:
866cd2502bc62e70bbf930a63b14133c010b693d

SHA-256:
86d36bf3c40d2e737e80aefbd2416172dfc269299331131cc9243853c21db2ca

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 10:26:22 AM UTC  (today)

File size:
558.7 KB (572,088 bytes)

Product version:
15.0.4551.1507

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\officesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 2:33:39 PM

Valid to:
4/24/2014 3:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
10/29/2013 11:12:18 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:A9aCPWow6K8+6x/lPQX0dlnnmXTwfcfR4g:AsCPWow6Kb6Ts0TnnmXTaKR4g

Entry address:
0x44237

Entry point:
E8, 6A, 4C, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, E7, 18, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, C0, 11, 40, 00, 57, FF, 35, 48, FF, 46, 00, FF, D6, FF, 35, 44, FF, 46, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, 97, 4D, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 25, 4D, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
5.7678

Code size:
415 KB (424,960 bytes)

The file officesetup.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=ad2b01c9-ffeb-4b33-aad7-17cad7f619e5&token=539ca1b7-fd99-40d2-9f87-7ce2dd8529e0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=bf5c3a22-8b82-4008-802e-7a79155f8f42&token=ff280124-0946-4744-8178-19ab094286fe&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=122e8561-0fbf-477f-ad6d-5604432509fd&token=1a8c0538-2fdf-4f4a-8b3d-0c39e421194f&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=64ce28a2-a434-42c8-b4a9-308c7d3d4216&token=e737e2ab-d8a7-4685-99c9-afc86ac6ff33&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0a79aa5b-edb4-4b74-a821-12808f7ddcff&token=50e96c74-543e-4039-b453-846702d5fd7b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=5f4b4ce4-d0f8-4e5c-a2f2-fd78a67a3871&token=bbbb931e-a284-4d18-9ffd-f66c04ae4ff2&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=94f52323-e58a-4041-a662-30802de1cd58&token=33ddeb0c-4ec9-428f-b96e-2940d384c1cc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=d52adab4-1b8c-4092-b894-abdc636dbb97&token=762267e7-89d3-4472-b365-541672b6c814&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=81e84ca3-77bc-4faf-ae2c-2767d122a78a&token=a45ab68d-5d14-4900-9965-7e804b6d124d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=963996df-164e-4fd0-8789-62bc04c100d9&token=67cb771b-26fa-45c4-8809-a4d0921bf7db&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=HomeStudentRetail&language=en-US&platform=x86&token=37y6n-bv3wy-y3fb3-rvyc7-yy2xq&TaxRegion=PR&Source=O15PKC&version=O15GA

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0d4a0033-a187-46ae-91ca-49ba751f6f4e&token=d8d08ec4-1de9-479b-96b7-a91ba5e274b8&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?ProductreleaseID=HomeStudentRetail&language=en-US&platform=x86&token=RTRYV-NKBMP-GTH4G-MM4WV-M4DT3&TaxRegion=PR&Source=O15PKC&version=O15GA

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=871c0bf5-691e-4a79-b7b3-931c500bbd23&token=89e76850-0920-45fb-89e1-2c78e900f815&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=29aaca08-92cf-43cf-90c8-f0134c42f226&token=62528549-f7bf-45d0-8ef0-b18f046e07c6&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=88acf406-5bc2-4432-94b0-1bd9fbefed86&token=1327545e-147e-422e-a0e5-53710898f852&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=1524411b-0de9-4cdb-a933-34491495e5cc&token=1b492e3f-9738-4073-94fb-fb0cec7f911d&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9a85a882-3308-4be1-9f8d-11f4ec9e6092&token=fd04789e-ae1d-490a-81e6-7a6cf4a8d74b&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7dcc07f2-ead1-480b-8cc5-e2a04621211c&token=7b097f36-9d0a-4c5a-b378-3a23f7f9ffad&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=85d51034-dedb-4563-afac-b429ee14f141&token=f69ae547-31f1-498b-9567-8845f0aa297a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=2cb65de2-361d-4854-a73d-985fa0fad668&token=59c6dd5c-2e8b-4565-9d63-1bf5ca7574ec&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=38ed8e56-1cc0-4560-9ad7-dbf3cd765ac4&token=d07d3f96-bfbb-427e-9960-f42c80d07b6e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=08235ad5-9c2a-437c-859e-4808220f2473&token=4d525320-6b7f-4c9d-9ec1-db1793593131&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ea82c590-a780-476f-88b0-39d8e466105a&token=43a82364-d75d-488c-81b0-b5027bdefee8&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5a89cc6f-3586-4d7f-ba1d-4fef903ac187&token=9aa759cd-34ed-479f-a14f-de7f0de7bf4c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=6d564d81-00b0-4784-a1a1-a36a12036a4d&token=2374f341-fe9b-4e35-a9e0-45b7de95e7b2&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=6eed9cb5-cbce-49ad-8a79-57bd0b07b785&token=b99145e6-7866-4e93-8811-5a6a259e4af7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=9c58fc47-97aa-4d93-87d6-fec57f176491&token=3fecc168-81d2-4d37-bb2c-96cbd2f66934&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=427085e5-1693-4078-a449-523e7505c0b4&token=faab75f7-0773-4f21-928a-d0a1244502d1&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=HomeStudentRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5ed2b072-cc95-4b8b-a692-8c515968a2f2&token=882e929c-2513-495f-adb8-38ce814d1498&version=O15GA&source=O15OLSOMEX

Latest 30 of 106 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.