home

powerpointviewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
14.0.4730.1010

MD5:
eacfddef9c267b2922cba7e1df4503c3

SHA-1:
95fc62ed4695a04c05dcca9534923499a5e7091c

SHA-256:
12957eab561b52b8e8ee33fc6c44771e53f7864b971b20241e66bef42c11b381

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 6:07:43 AM UTC  (today)

File size:
60.4 MB (63,347,104 bytes)

Product version:
14.0.4730.1010

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\powerpointviewer.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 11:40:29 PM

Valid to:
3/7/2011 11:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
1/10/2010 5:21:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:OoCRFyLSfKrX6/5M8WH4639rsAOw5MRaiFdjaXRw:LMXKrX6/+BYArsAOwviFdjMw

Entry address:
0x2DBC2

Entry point:
E8, 7B, 39, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 24, 03, 00, 00, 8B, FF, 51, C7, 01, 78, 97, 00, 2E, E8, F3, 39, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 2B, 3A, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 7C, 97, 00, 2E, 8D, 7D, E0, F3, A5...
 
[+]

Entropy:
7.9997  (probably packed)

Code size:
277 KB (283,648 bytes)

The file powerpointviewer.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/1eb83bea36910a97ed4dffe8b077a182/550e80d2/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://lb.cdn.m6web.fr/d/c/a/86e7d1e7e01e4e72618c028d67c07d43/577a5e81/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1485974860&Signature=JtysTpmsIn-D9ft4-3CdDaDBqKOaqMFWvVfmsbQ892ZtDlqRJmGG4JvFvr1--PUdo8UmuG3pGlfvyM-1PSwVHOeiCewkDD3X5vdcp-tlQlC7O6eJ0FhDJBRMjXG4AclNG9x9Dbjfapb3KaKrgvuS-~BssgjjOyQgyb~1VZW1soc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1478564692&Signature=Rrrz9alCZSGc89ogqZ13oj6PKaGybOhqM1kHL4Omk0kSymBzHhdPFc5E8x16DpN~yKziIQ2x1eOjS3Wks~XqskCbR-OwHsa7EuStfKbu3gdUQ7nNCOpQLhad5yzJDORP-2GM~px~Ja8~Cg72XGIMnN7ygBWZBoL6RToJboMKDLo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1487062694&Signature=aw1WFOg7EVeV2ICmzysuzSxcl2PdVHVRdQWfFJYnlQ6Npau9FLxJTYCBUL47rHXcS3QdG88hUQ1FD~s556sET7kpG5HNIDhC7FUJTPYbe9-ldyrldTyfhf9i78~W-AsdM7565nv~cbr6N79ANKLCwEkeTKQrDiFFxfok6CGxXSA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/253/5f5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=29532&instance=softonic_pl&type=PROGRAM&Expires=1448410392&Signature=VlBbT7p9jcq3wdCPn8jLy~5NVmkY4fQkYXRFuShpVHrLfXQe4rL1kVDTF8ePp~O0CtntOL8CPbI~gRfOcaIy3SZm~veDhL-HceGzTIsYbr515uYbA0ioqiUjK7LzN5vI56KQpXPr-zprXN1yWXAhT7N6dWbDCG0LJGmWzVY0W3c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/cf6bcd4d47682bf2a7740852d283c705/57fb4847/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://lb.cdn.m6web.fr/d/c/a/9e7d527e9b7004067c6a0c422780deaf/58a48f5c/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1484275423&Signature=ZkkkmFZ4hevPp1av07JcsFW01idUl0qRd0f6SOCD3RVBz8DoC3h8KKYwvgvbDL1YnETh2ILG7PBW50eITTrW3lHZnK05qWfVLZkWST3E-zzCWNciL7b6SBYWRt6VYFl7yN80ynQZeH68WwP~C~qlqRYqoPAbmgzXXhGsyTyncys_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1476210454&Signature=MNK9bI1GDRRpUm66Xb2pKnarK-R1vAF54I8v~OEW3lp2PBRJo-JyfLgBKyHKm1bW3a5WmFmrOqNssRRnkeu5PXIK3a-zuFlRrSGvRqFABtfUlWOt2Vd4s1wfof29KbPHqp6H8tRd4-chJHAsSglHpFqaBY88PL7wREZWuE5Fcww_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/bb87aa9b20ef8df2a7ba60d0c07cda92/5896077d/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1478753141&Signature=PdUabeq24oAdkFyHjDDaH~TguK38eVIH~msK7wbx1VyQvSmLiU-OkHd7sE33XfyRTwpnmNfOzWL7TqV0tzCEght9t5o4Yr2jViXcvHXCLcSRXmNDuYohfGVPoztGjcrVR7dkNM4rWyZdwu7fB3HfGm8bFGt6aT36LaNL57JKkxc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1481352367&Signature=eGYmhxomp0zacZNi8oHroHzvm~a2-xP4r9JgawnvQ4DyKd3ghYKzHefl9s4E43MSXScN24sTLEXP0XdCXZ2aqObav7zaGr3PMI86miJSm~5b7KL6y2koVayR7U6W63eqQBu8hfeW8NDtaaQlqZQiJYMZoBnAggVT94Pt8InA3aw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1486010910&Signature=IZqQJCYlXQ-TnbOgUBRoKYvy4HeBmGKCUXtoBM6Ngknux3zqNX1jnMlHHyToSO4jZ30ejgTvJDDZ9go7JZ0wd0KFd8CHpMTeb8uhHF8SQPZOsrBXtxGg2G1xvZncsRc2-TM9xVl46TMginneCyXMn9RDUvkCfgJQzgy-7XukvRo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/a3e34d4ece53686c9aa1ba6c28c6bfc2/58a72733/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1480828118&Signature=MuwbvMj4UlyaTH7PmlYUgwFYpHrGQlVcxviY43rdmFpzCVRx4ZU6jFd7aC56zgptN2bsiAu2Pfmr~1aIH-xdJlU~B~dxb~u5MIpKYhignaQ-VAagW5Pg8db2nUDHkD7fXxH5L0XMjJKsGOGuc2E8TphL1dkeIvQr7WUVAzXlTkg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1482633354&Signature=Tap9pD3bfJyvN2udUsqcngF4uSNrwN3bsL6rwz~JCvOUlkhkfyNfRlMBFz1vBAw4IWpo3-StYwf-wERR5FpjYO448tisHctpv0l2kvNUdrOB6WRc~S17xNoPUcrUEe9x82OyEZ8zan~NHJ7uDfikD9Ty3-1tqtbwjBGl~ld8fD0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1446779058&Signature=hvrT2oMGVt-TtnWS-gaXYcln1vdjBSo7w-qhGIJ11tS5J9WzVcwIfcWBWUUV4ScJi7KWYzHq06if14fx~ZzwUIP5IZYe0ynB4c4aTNjtkfm8r6w36pZkR6cHz0MVRwuQkqiBEE9DUgbkuXcPkfZHlCDt78R9-xP8n7i33ykIj~E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1486621969&Signature=iJA~ff8D5lC--RweqZtnfXOIWGJpGju-szZlqopaWjv3oN4Srh4Yd7VsuB5si54-PahWxMVBF1SN3J~cli0NctPTvM3lNvB1BgcblWB8fTOlJFrxHKvyD9AC4kRG1WWJYp0P28hBD4DKhpM-jq9bptQ74u-4oLFimflKVm8yf5I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1485421336&Signature=Aw~4nE-kUO6LHCstLkHcQIKGG5T8nm5FgpycYzqwu60ycNPkQQQCiR1iYHoqHhL9SGV8Y5zriTFElhwQHsJTxsT2cQ6hFA5xxqgehyV2u9ceGZRtLkTlbUlgT8WUkpxVl-VtLgwRcb-Sx9-R2oTkP3fEJsHvfak29ju-hBydVkg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/1f3037059d87c51a881870b26a389810/565b44e6/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1480051718&Signature=Rjhb5g~~bWYCTrYKuNeZsvCK5OaEQDmd7PXEOI6hW1Y6aTN34kVjvcJF5Xvx8whE7L6an5vFpn-yu8p4c0M8uDguE9qHxe~I6PhXF6HBE03uxbTSxGEXJqXQqCJ-GV9~qvmZ7ulasmOHaypUJywkNRWZivRomLxJ7-5tVV3alvU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1486429465&Signature=L4XuPp23IwtkKlMkBfj-gHRgIt41hq9HFs0OYkL2ioJsoItgCP~UkcsoLBycckadLZ4ggjGqPTn~lvGt2~vOuTjp66Zkv7jenzLss8DWd4dJvy1zWSSxVhc8LuB-qG~XKq5v7sREKsng0ygUG20RItTFEDpycDcHvbutXKT4-2I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1480912147&Signature=gjNGFE8s1Bw1wb4YG~7xbRJEj-fM1YcdpVeGAjLma07g4~Y7Su1c9DZhoASOjqO8MelZT5AphWDksRp2WniixiANPDscH2ORyItZnf-MzAFL8Mge84IPfFgqGaBy22-zLlcSMNUEEI5hdiHLjoWXQhcJ5mtlsZwOXmFQsu1YWyo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1461646911&Signature=VPIwfcl6AuPtR5PYcOZZWh3YLm51xW-vdnzLOcIDIZ-wmYD9r4n81r6~y9YUtV4tYNtu2EcIuey9tad-IXthZwaypre~4a1tx4h6miwmOflCfBoxIp1GsD0ygbU-6VvEWxr8bZK1pEGBZRL1ghlPStWxDR-YpVyzUP1mePuJL2Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1448946414&Signature=hBdgdy6f9SUHspIAZJTvIWyJ586PXxMz8Aa5eFbztfdqeUPIt2aP4n7AasKjY7vSCwDPCRp5Dgnu2RtLCxq4B-aaGG6b5bcezBYD3BkQlIR4uphdP-p3cRCrEiLuRRd1X66~NGgmDHIBO1Mq0vxP2sQLuZ7R-EkRQMO~B~T1xbE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/79affbeccc504c2e188615dc95d6ee79/581b0192/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1474510598&Signature=LBkRT9FVGzeY3RgP0nnQfwLP3oDs~RhovIEDLMmtn~rC0QirIYPx0B5o5IyzW~VV9cDkpE4yW7MLOkMbJ4gmKd6OmthHXtn27zr4em4cAXjXnu2sjLdtef8bslplV9lKbvO4Lj4CTQTjQ9QA2POMb2RrukbbmdNvQJIlhxzntzQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://gsf-cf.softonic.com/95f/c62/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_fr&type=PROGRAM&Expires=1483161168&Signature=NU29Qs82lDvnBoPi8dS-P8~aFFlpXYSrQT~Kxz-6Y2qTXGjyGxweXuDtM-Ya~143UTTIOZXw0PMaFIpZP74igtcunORgnSZKRt~kR9SkG8O47SQqqZeQnyvXK6NZajoTDqZUUd5fx6ZZC9NxFZzM6SF5mId3yUnY8NDkm182GnM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer.exe

http://lb.cdn.m6web.fr/d/c/a/fc6e526d1e807d31f79217bb7b3ec741/58402ef5/soft/.../visionneuse-powerpoint_2010_fr_10781.exe

Latest 30 of 270 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.