home

powerpoint-setup.exe

This is a self-extracting archive and installer.
MD5:
56062a5738bb6972ae1077ab6dfb4be8

SHA-1:
6de84bac90e2951d98b178beac97f5ef1f996ac2

SHA-256:
4690a5fffbd2f2b243bae6dfab2b4e7a05b7f1bb93d2fd59d51a5506905a2379

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:09:49 PM UTC  (a few moments ago)

File size:
6.3 MB (6,565,048 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\powerpoint-setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 3:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:FJoBUo8f7B7amq1KO/gf8/9TwWmgGyskJgR9J4pB98w:7oOoe7B7LqwOYf8Vw5sgRXS5

Entry address:
0x43B4E4

Entry point:
83, 3D, 04, 70, 89, 00, 01, 75, 64, 53, 51, 56, 31, C0, 89, C3, 03, 1D, 1B, 70, 89, 00, 89, 5C, 24, 04, 89, DE, 8B, 4C, 24, 04, 89, 35, 20, 70, 89, 00, 49, 75, E7, 5E, 59, 5B, 12, 21, 52, 70, 3A, 82, 1E, 22, ED, 82, DE, A7, D1, 23, 87, C8, D1, C2, 7C, 37, FB, 37, ED, 74, FC, 2C, 24, 37, 5A, 16, 25, A1, AE, 36, 4F, CE, 86, 3C, 66, F0, 78, D6, B8, 78, 30, 40, 00, 89, 05, D9, 70, 89, 00, 89, 15, 50, 70, 89, 00, FF, 25, D9, 70, 89, 00, 83, 3D, 4C, BF, 8A, 00, 00, 74, E0, C3, 40, 00, 00, 00, 9A, A6, A1, 97, 92...
 
[+]

Code size:
4.2 MB (4,433,920 bytes)

The file powerpoint-setup.exe has been seen being distributed by the following URL.

http://li.ru/.../go.php?sid=28

Scan powerpoint-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.