home

powerpointviewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.4518.1014

MD5:
0f2cc7908333ecc2e53025ba4e86eed1

SHA-1:
2535f5df80ee13d106b57fa27d25fda1569bba65

SHA-256:
c573e2f039485d61a4d37c1eb656ac712b1929ba65a55461c1c8f24fbdaffb69

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 10:25:34 AM UTC  (today)

File size:
25.8 MB (27,099,144 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 9:43:46 PM

Valid to:
10/4/2007 9:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/26/2006 11:02:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:4yNA45geAfF5f/ZDL+FRzK6pGuvjBAkLH:Ru4Czt5fRDL+3H3vLLH

Entry address:
0x56405

Entry point:
E8, 26, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 70, B9, 00, 30, E8, A9, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, EA, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Entropy:
7.9973  (probably packed)

Code size:
510.5 KB (522,752 bytes)

The file powerpointviewer.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1485476278&Signature=HlDexd56BFELTUaG5hHe7AbFHdJRYZRCdvKRq5wK~A6rReH-pJ886bEK1fK1PecNDMqxn84jRM1iRZTqtIc9ZRv0HrmRXmCd0ChJC8dpqymqevz0wlpmuwAFjQacgOSkefZ4EniX-8xsnsXovZUL70Qybc64CD0~J~t-DUxnZ9E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download938.mediafire.com/jfhurxy0xxsg/.../PowerPointViewer.exe

http://download1620.mediafire.com/513v48c97a6g/.../PowerPointViewer.exe

http://download7.freefiles-3.de/chipeu/pl/.../PowerPointViewer_14.0.4754.1000.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1448861253&Signature=B7hv5d2BmW89RQfFCcZqoewZNW~Jyg6lZCh5hwMKZAONwD588I~gamNGG810ef7VtkvOL55l0-2678~RBXQB~iKJl1smESZIBNFzMTyfrawbgzjccqD2u0CUma5aeWRVBpEinngYsz9yy7LHtrRqmCMQ1mqTf675KCHPC8pMQRw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1443390107&Signature=VAUTA1VZ959gIgbrpKXEFQRBraK~BZWBogwmNIaQcWHsqs46K7iRPCs0big9tgidzTNLs4ywk18mu~Z19dfbBrpl0Ra5r~1fXaJjBHQxVmlG6~TriXtPXZm3jEkWkQCud2jcCrf71733zAhoeoQWSkXhcx0XlU~xvUfgb3zP48U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1485745720&Signature=il5c3~n~DeVpH-eHTLqyNb0a4k1loLWY82Qi9YpGFq6eOrTKOfShJIoYqHQFsDiWsKIMOx1qj-qtXvupbtVWxyzuu-tEJUS5thR-7F3LncJVsfNNstAhLJO-QvhXjjY3Go0zf~lWdcS9tmOEqLpLq61DuTtqSlcjWHetU6s~W3Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download938.mediafire.com/9d4cw9cabx8g/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1480994126&Signature=L15cfn5LaqoSkG-VV4bj4Fayo7G8tsNnoq9TVKSGtx4HTkRPeXbl4rd83DfceZQdSR1PJZtpRDNmGbfjifTTpwhjYDczbUdy5WrQ2ujnBn1YSX92lYgCSX~sf~mEZ9xHFlpWAE5wfjpVVnZL1XL2uNz7QVUlnjOxBdTKnRuaPMw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download938.mediafire.com/2cns5cl74bag/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1476644696&Signature=YcJvjeXuJjeMYMxpTqnfzq9gj9mt80zKidgVdW1XOaVC2EiHL8dz3-GFW0Fp~1-3F6GZevfIFuRVteeu-~qlx9D0vjnwv2TJgmlDmEler9HkzvKWv2URmm4y3ixgwncTsUHGZxEGSk1n6e8mCOqlJJZuG2RxCWTH2Sq~Y2e32Nc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1479265630&Signature=fkRH90dh4VENTzgH48wGUVzr~LuiOtOPQ3ReZ0ETZc7KUsWT8qmJM9wnXVUl2HNC4M0nrksyf3llqPsKAuX5imsmKRyO1xgqNRVa-PSASMqoxbn2IFDaconf7iX261nJXVHU0fA5KVM-tSaL8efNQNPL82MFKCMnzSKyNBNXljw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download1305.mediafire.com/wj9x5eymjbfg/.../PowerPointViewer.exe

http://download1451.mediafire.com/3wspz8yzoz0g/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1462135582&Signature=RXTNh4La19e46-mcafAQHVAcEgLbP0jCujaaqixGuvSeHfnbnzUU3CKeHweQVVbkJlVxwr1SWAo1DjDz4AUsiFLdk6AwHGH5SLYbYdu6rGR6nUYnxRF6yrHA4rVdAmeghngFxxiTyTkeUtLKXgZQP6faReZhJKvQJmiFRo6R2zU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1476692317&Signature=KfEt0tEmNXb0S21RVftizUZXCbhCwF2WQ~tI37bXP7IGqeMGw0FKyYKV5EbPmqLLUbV~QknpFwc~YosvIsvNn7BvXVh6FMM3j3ShKI8KaLcVr5qWRt5C2hViNp5sy7accIyoaq-6qVgAtIGE4Va5~fR9PaDMKFq4jQ9AAt57c3U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1443316823&Signature=OiiQMA15Dp6vNU51WeN2x8TuqR6q2uW-LxkfMQ7lYz3bwBXIZOlxKO6W~InU7wNHquk8wc5TgFzS-jwd~ObNieVwKeAZ3d5AWdc4r65VvR9OFv02WLMSHreiBK7xoh4jsV9B24FsIcsIO1wrl6ddkoXjrMjyvmNBrnh0VmMJEfo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1458882055&Signature=QYsXSHHWFcSuddKYdYW1v9sEs6iay77VeI6REFOD7fGILjAWxEc19tdW1YvHPZyioi9NOTk96lA~57F~0YRIVZIMvTswFba43JZQ6N3x5bM6DaIBnKaaIWJS2iuQbhv6Zelc8Gqu8UwOHnHQrVtzU8L-sA2Jqoh~NEzSTR9gGBQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1479172074&Signature=RKru0wi4SXxdBcWtdlbiNQDmW7X6Xygfj95GJPzTBifnmqOMNaJcMOJsjCdkZu-UGZ37ESsEip3wAfbE8MMpVYd3i4n2mkpGDYo7mxnSY4sF18zpYTKeioSBWzIs7uCFzYEZC3mwDJXjy~zthDnP01T0AnKcfVUnaAARQqW-F0U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1465005528&Signature=OgjxAkUVvX5ca9BUD-JFP8dionljPZk~TDsglXAFOZzi3JAoDYsjQGqcZ5YBJptNqxH6FZuF0daz0FBwFdE007A2WDIxuWzU72p5TY3ZA9XSfd66cg1-FKDK2JUZdbkAxH-8N1Pgia8XO0ETSXhB-UKLx5yUeJIA02C5YMnhZEM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download938.mediafire.com/xdbwt09zwrtg/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1477267501&Signature=O16EVvbHKNU0UG~TDdf~W7ZurSF~sd5f5cbcxGOXUnmpGLUb5PVWz2pxuY0HCPktAK3D8cfYHe3TkoutMowCA68pOhoSfF9u9m5adcedEyZzcQ31PWfT10zkmrHW9UVKnpg~OzNa1ht36501JGRIEongQC7ZP3RYQNQ1yfE0SFE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1475946917&Signature=c7M9zrWYLxmLcePNuc3iJifRvHbYox0V5a6Te2gNNJ7d8dWnUQ-upg10YPpQA422niiHui8benl~5Lkmj4qOJnxRYVoEvuzpdnCNE~yyQa~9Id40WCw9M7sJiI9Bty4RbUv5FvRkfgrbrLJAwFfqA7RG1HtFDSTiNe~NKzUgLrw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1481363514&Signature=TVmbiPQ-T8hBe-dpxz3Ii7xsLHZ6Gj6ihRkd6rf6RDq99C1gtUwW~XWh6EsFX--miyMwQnmxXzYTPR-GW1ZWBBusJAF6cq~PloNvmwSqCaiINQ~6TAHI~WwyeQxXkJxCq1XkJhefVBGypW-LO32AMOhnrNN2MF-dD3tarh1O9N8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1477029690&Signature=YXjj~cffIb26b2WqCCG5OCr~MJGaE7seRSv2OwoalJ51F9JQd59NMLErnZqAmwu5fjd66Hd3vCWaJiiFWDa-T4jM5k0ti15lqOz2SM4rXUo7sFlZKODq8r~rasigxDNC1GwRYBG4zKGDil~0cR5m1a8Ykbq2C8TGxfmI~PnFr04_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1477281795&Signature=VE9SX7t-SLYyF00TVBCJAnOgKR4TmjoBrWfbQ-9xIeZVdguaoS~KtOzCHC6jT8kR5-iNbRdAo2nsT8gHFmUMMJy3SsqQ-TNKI-Ctu5NJyZEh89MRXeA58t~FobUrg5OaAiWP1vNBTSo4MP36gJUx~ZfWglReFmeamUOewHZBr5w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1468354512&Signature=BmDXYa6eobVs4SpOMu9zZEcS6qpIFXVnpuoT33fDM1SO5g0IRNqECEAZV7xwYbGi0ONJYME9qpuzOkN6NBieN0U5853Osm~NXGKMuYTg0BFXhTWJKpKbX1C~RggEQBA~ncNelfJFgAQkJm0g8xt5ndl0jmV0hMnA269bL9jIrPU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1452233094&Signature=Xw4seDSJ9JUcdeueYHWjXF2JogcMvviA43txg0JR1xMh5WBk7JXb1BjoppZuDH9haOawkZwPO00f11rJsg9XMsTIcQ~zEUM9zM9i-Io763DFbMBetO4jEC4XBuGA0w6OWzZBjrF8sH13gpBmuKKKx3TOd2ziyc~SLhZIMkgh9NQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1474934826&Signature=OOS8EHhmEFnruCS-6VNqO0NpD8xoFfjzpLFArafh9bq6LT5pVk45riE114L1kbFrBNNFzEZC3WgkCPorRpAPETiTviG~FjFteaNFtKkNxgEdo9ajOJ8sUjzgXg14LsLRJqBlAU~wBL3jOzwXPTlYilH531iiSbp0U945-IeY2Ss_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1452819219&Signature=PY1xR3-W3WykPWasBLfB44I8RSKVAKChxgfnV83EArH6gSp4JvmJcq9bYc1kSsQkZDwKMBrzc1wa~6mSs3n0DFGQPytZ3YZLr~--fj7rGIy4VsoYPEJoe-4-VQVijgMFDE5ORb~geO7EIAzbbCuC2A-T9tFsLM3VAzKsNaq9G9I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

Latest 30 of 190 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.