setupo365homepremretail.x86.nl-nl_.exe

Microsoft Office 2016

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from c2rsetup.officeapps.live.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2016

Description:
Microsoft Office

Version:
16.0.6001.1040

MD5:
9332db648a7e5bfcd8402816385e104d

SHA-1:
879a4f678750c1d1107dd8e2d6712bc98d825b10

SHA-256:
3a481fb8accc96025eba2193e2a7875c6c1fa0eac1c858cfe47fced7badf0eac

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/16/2024 5:02:03 AM UTC  (today)

File size:
2.9 MB (3,060,904 bytes)

Product version:
16.0.6001.1040

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
Ducth (Netherlands)

Common path:
C:\users\{user}\downloads\setupo365homepremretail.x86.nl-nl_.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
6/4/2015 7:42:45 PM

Valid to:
9/4/2016 7:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
11/7/2015 12:27:50 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
49152:fMNJSnnrv3NGru6rnlcnF5j1jsPK7t3WfwwF7LidBbTowVUjyjwYWlkssvNERmxp:6JSnD3Qr3Sn1jsPS3WfwwFwVwY2sOmxp

Entry address:
0xCDA62

Entry point:
E8, 78, 12, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, 48, 3C, 03, C8, 0F, B7, 41, 14, 8D, 51, 18, 03, D0, 0F, B7, 41, 06, 6B, F0, 28, 03, F2, 3B, D6, 74, 19, 8B, 4D, 0C, 3B, 4A, 0C, 72, 0A, 8B, 42, 08, 03, 42, 0C, 3B, C8, 72, 0C, 83, C2, 28, 3B, D6, 75, EA, 33, C0, 5E, 5D, C3, 8B, C2, EB, F9, E8, C5, 16, 00, 00, 85, C0, 75, 03, 32, C0, C3, 64, A1, 18, 00, 00, 00, 56, BE, 88, D8, 63, 00, 8B, 50, 04, EB, 04, 3B, D0, 74, 10, 33, C0, 8B, CA, F0, 0F, B1, 0E, 85, C0, 75, F0, 32, C0, 5E, C3, B0...
 
[+]

Code size:
1.4 MB (1,505,280 bytes)

The file setupo365homepremretail.x86.nl-nl_.exe has been seen being distributed by the following 24 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=01cbd3e7-a197-4120-a49f-d575c461a1c7&token=4bbea93a-bbaf-435c-9b87-d6e957be51b8&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=fe410063-51a9-43df-b079-60b77ec38724&token=9d59b2dc-9840-4e87-966b-9e8051909d9f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=5d3f7848-8e12-46c6-9b0c-b6c5e6a85cd9&token=b7cbc046-60f1-432f-8d0f-cd2c6dff2e5c&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=9036202f-7859-4779-816c-7cf27b15899c&token=defe8e34-f95a-4dc3-9af9-b55af37e136e&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=43ab64bd-2cb5-4edb-8e64-1500f6279331&token=863259c9-7fab-464b-9717-a48d1efdc42e&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=7c932fc1-6093-4715-a135-1b04fbf52b48&token=8714ae26-a23e-421a-84d9-4f960818d93a&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=fa86e6a0-8843-4dff-ba0f-30a173db2cc1&token=3b5bc168-9aef-4569-b219-9f3a6066b94b&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=d401cfcd-4614-449a-a9cb-2c3b778c32ec&token=a3c8039f-a9c3-4394-95a9-3175d4ffca4f&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=2aa5a352-256b-4420-8aed-bcdf13786709&token=4e87ab25-258e-4203-b124-ed4d37dcd387&version=O16GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=nl-NL&TaxRegion=db&correlationId=e5b44d0d-6e7a-42cd-9772-78955efd96a7&token=91a0a038-faac-4525-a2ab-a0f7bc98fe53&version=O16GA&source=O15OLSOMEX