home

powerpointviewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from s8191.chomikuj.pl and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
14.0.4730.1010

MD5:
ae11418489b93cf8762df8b7f8ad9322

SHA-1:
785369bccc6e75a38e90efb5e1c4fc030e98ddc1

SHA-256:
d4c46656fbfcbb386df67fc40b32bf8afaffff416094acc8648e62555e79e2ab

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 5:12:53 PM UTC  (today)

File size:
60.4 MB (63,360,496 bytes)

Product version:
14.0.4730.1010

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\powerpointviewer.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 11:40:29 PM

Valid to:
3/7/2011 11:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
1/10/2010 5:21:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:tDmF37ru+P0IB4nifFpp/DtHQjwUwGiIUW5hvYzfxO2L5Pp+7dziN:RenuKrBdhDJQjwhFL5wiN

Entry address:
0x2DBC2

Entry point:
E8, 7B, 39, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 24, 03, 00, 00, 8B, FF, 51, C7, 01, 78, 97, 00, 2E, E8, F3, 39, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 2B, 3A, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 7C, 97, 00, 2E, 8D, 7D, E0, F3, A5...
 
[+]

Code size:
277 KB (283,648 bytes)

The file powerpointviewer.exe has been seen being distributed by the following 50 URLs.

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YjqvHSxlFkwiyAK6b2URpNTIG2Jrqb-lwxpJ9mCpyHbTBbOIvcnh54JvLGk8x_hslBWD8_QAaNA2hZUatov-dWXgvXxvBIAaZVTiQV6cg48lWr6xOihlWIqwwervMcXAbw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN5I91FZI7jp9m5npVrUcw4LXpHQEPKL8PnHqomgqCxRSjnpbW73hHrRWmoqfdbKBs52nCrgJ4F6X5VLtEI449i6CANoFLxJiEDoYI57xWZu8g&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN53Zkuv4DW_MRdEPC36kRN5Rq7RHfTXsyJEVxLO8zafA2OhNnH33bBMUVSi_qwBWJLO32MxslBx-Ai6GJGwaXF4AkvtEXK4BKYdSC1-tAz8sA&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YjqvHSxlFkwiyAK6b2URpNQaC_-GY8bRTJJa7wN___XiMmcvPgCEY0iXzUossSbasqmBhHIhbLarNpmp45EkgGnV1xrN0Qu2FqutnYvY9OF0d_zE7KpQX3t1yllHHkKkjg&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN4BFfCJ26gr0wFQUiLqjboDWVawDvv7ueknHdNhTmftpo9nRTM_R6jJdQ99kgoaWbdLOG8a4Tg4FqG29ucwQgpuKVw7idSyy18TYhe0W_q_-Q&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN4jI320CEXQttRyJaobuJjIvqHPnBWHbYOS6B30j00zw9-XunSQaotNw36ZAfcL9oS4YkuJ705uvyBQNH0gFzYaV52GxKD9XgotqBml9oNXRw&pv=2

http://www.bytesendclear.com/if8npxekQGdcPRK8x1kvpX_gTHZmHzhxsrez6BDJ 9_LCDeTeSieRDWazZCiCacFAT 1RgcL3f8Jx FLxOnwCF72MuS_ZHl6km1hfohiZ_BGTd9nylq216QK_5Ehx8KEgO9FmaQhNJDMlHls8uVXqy0b4OokfVvIbJZwfjGztJNFwx32Lv3IKdQ_3isNQE3MdschIodzFYUN foRe6oMM3K7b2iGiHwFB5MaSoOxq0Q7q6CJFT5t aA1 SRltzk 4 q9tN6sOPqi3Jh0a AM WZeR76nsfoJg6CTOgukUG7AXEo6OR2dDGoyWevK6oYWMIU9O_H MyRJxqp6OJAEzsxIKIfmsr5KV_pikOwegjdRuPhnETOFsPSyKaibNj4byqM6H_sA4r14a1_zzKIVLVQMOoHZObG9moNrWuwaX8 DNr7jIVnjv4GmvejF5wxe3wmCoMkjdwNlj9XMS43v9AdgA6eLQlbfI2uklgN7lTVP0WhuiU7cLIXixtA4RlqCGBx6hdlmfutCO_uFW7CdxgJ5EZeqnfkD2K72pu35y176QK03yumVv9qjKf6ypsRu4hmv8mXZ6yufJRW0A4QxoEHVFh__xQ==-G28AAEQ39byqx9 vn8c3ZEqRlqbIxrY55YC1raWBJWliB8J7jGV8Qxk8g9qYjlzkfmgj1VYMQ8 P9uQad6JJ6qks Xuf6ndxGEZ4gocPvE0Q61qTADdZ8tcB

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YkZOL7mry0y82HrRsntzIMqcIT6mh0-s81WY39s-_8IssfrcVhi0U0FVURHrXTPCmgSd9G-cLGOOLGmRlnlnKIZPB0zI3ie2SVSol-UlTI1aANNQ4cpOjAggoj-2wrYG2aqPAE__MeWuLqhbQnQL6wQ&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN7cCFiN8pqy2zQfrPTZ-U0zMoDoL0YBXGYKeW-vhZexlcXw5pQR47M21s2tLLsZpIXtxwgcPOblrIN07Ee3AcA2cUd_aHnt7trh86ivJAZmVw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02Yrbhxc9UuqavK3wKiP9Nh33zn_iy3bIqFSsvADBMaW6TQR2ynFrB_D2gRFcXZfkwkXrBlnKl170GUxrQTUJp0Wic3aTHP1nxlQfeY_n0Q7UpseuYP7gaBXo4nKMLIB3U9Q&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YvtLlN1VB3a0h_Uhd85I6J73OK0xC2KQA8_rWcf9b696Ga2SIuK_ZI7v8XqhV0tpOhzf3pD2h-hUgLTPrMBUk4piOSGNE8j8uf1iLTEINBL60tDjiNUIcYRsELmK7xU6OJ1vWPslLxnPFLBeLPy2hoA&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN60IVOYY21OYqQEuFKduLXCNNWK98my5T95WPBGImP2A2tKoM79njPvPqec12deegiOnumYDb2qy-vBjF3HD1bm_Ea1rQLQgnfonUWm7_OjQA&pv=2

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1447896750&Signature=FTzW-G9mRsYQ2mUgTsjWclYAaa3qA5WKdMeykSBbWdmjUdouq6aS1cidkqtVj~YBLeMvbhVL2V94FS9dY4RopccfRAeM4wuLJ0i3Yqa72vuuYYjqWc64hcqZE9k2OME7IWGY0oQGWff1LNiI4KFgmcSU69uEdz-~NwLwSbODZ5E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://download.microsoft.com/download/9/9/1/.../PowerPointViewer.exe

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN4Enk2khJKC0AiOzsPaHh3WeiuFeMK2OgNwT51aQUxOPyz6kBbOc9-yT1CRJIgmnjKaFsyF87mdHX96kr9VDo-o8l5WLF8RgSYf8kZL1O5lCw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YvtLlN1VB3a0h_Uhd85I6J726-ZH-tfndhUQmd_XqfkkY6-dO9okhDrplduLVTWIzlprXLOzb9GyP9Cdvg8z9fqyQwFRUgM2cMAze8zqj239ZxN7dW3QFal-8JpC0zDx16A8LCvkXm4zuF-OuKR-Pjc&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YjqvHSxlFkwiyAK6b2URpNSL4eoakoQVel5-VL3cQXwmkNK61R4HXFCrTJYbA7UeVgg9zPEcCumlTDqKOJGApw7l4Zt4WutnN_Hl9meg9wPYZnXmtUg35AcEFE5kCd3HBA&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN4Qcc7Dmd_Lzw-hXRLBZUjVFpzZNjHbbfBLgL-sqo1l91quDO0dR-_2UEpgpU-ykcWtJKHHT5-wv3exkOiUKJf6OpAfAkuA5dbuLrcbw-i_lg&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN5yn1c8WhBIwidlxfHIW3wy7n6KgP-c_4F5JqVsXnqnEk-GXUXdkyAKW6fni8DxeCunVZJkWB9djfCP-TRD0ofKJ6xOmWlmgfomPPd1OQPEvw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YitUixHRgZ7_IT05xD5ADDMQw9H0jc9gwUDv0vFL6Tet8iRgQa0NMbB3YtF89ZbAMK_3aU5yPJY816yLVJcDgdusxooNmyvrR1SgyB48au4bxuOylbasQuzZReDK9NSwBw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YjqvHSxlFkwiyAK6b2URpNQ5AtZPtRw5GOQnef4aXTkSI2VTLfGw5j0s1VhVwqkDsa4oOvDCRQAgV2GNnxXOaSeM1v8ZzN-DkoC7CsF3hmqM_ftYnNVb9KZj4M1txzzMCw&pv=2

http://www.darmoweprogramy.org/download-file/.../

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1468375855&Signature=hW6cFxtOqlmEgIqG8gYJFj1HXoQmP4qCg9RmIDCLN59A3HxKY9I2ww~-pZYhYDIChTy7Hwcg7isrtKI3-pNHhLVL~SfEx2kVoQfoqjwsXaciSsz9W9h9QJ0e2yLBiDo4Xajzszhon9Az6WxS9GicVVaCe1WXu6qchnl6WOhjwtA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YjqvHSxlFkwiyAK6b2URpNTlqWsEIxSPzqtYFwtxZnaq48LN4R3Lh3pZsxtz3HcmM9zNjmlNZ7O117G9tRP62HGeY13MSFz5XB1Ul2BMbvDpE3GR25ANGA4isavVrkmcRQ&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN5cGqye5rpMNXyef9lWOxO_xhE-FSO0R5ZIyPv4EqJkUmHW-AJlT9Z7mk4-rq-mbhKQ5uLy8tSghvGlaaVOOZzp8XjnBXL-GujoXa-5eTa1_Q&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN6koCYbR9bdH2vXQbf6NdH-a7TpZpwNg7mZXxwrNygU-sUcjC4jSTtUTlTkSoYRuXtMwviTswWsmlrx6B41vO_MNnROm8nAVdPM23Fn5Q_iOw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YvtLlN1VB3a0h_Uhd85I6J7blXX3dU754TtENJXpPyzO8LWDOPo1AYaoVsuBIw4CvMEQ6Oz7Qo8T9CSQHMy3HS1WVNYX9zpnzsrzLaLcoCno6EB9Lc354iwHK91STYzzIDGt2gkyHi0IeNSprLsBFmw&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN5oFSqbLkMI4FUS_KnK1Ip7L3UrsWNVmqI8ze2R1WM5ZRMQ98THveFNHuapiLo1ioaWlNJUeRxvpnfyVwRjQvNLKmtHtNeiY0GEij7LV5ySEg&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN44j7k4spBAAsW0_2j6rOT93oC6GeJUOf2Y_O7f8GFq7pC-UH8uj255KlrcbwwBXy6FLzsoqCMzQ-vK-SxgYUDgA28cgf0TxQermMyC_5DKdA&pv=2

http://s8191.chomikuj.pl/File.aspx?e=I2ELLM-QiWL4kMQa0_02YiF2lUakfFEGEI_q119rAN4IpOGHyFwl4j3JYHXjjifNMgWHsPgsh44KL7Gy-4vZ0-bEsL9pqx6lb0f36jQhXLk2v1lY7dJCr0QTvKRmXZIzSwnVBzBtI4JuuAZi5wKIAQ&pv=2

Latest 30 of 91 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.