home

PowerPointViewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
14.0.4730.1010

MD5:
35ff8ebbea457ba426b47ff6d8377284

SHA-1:
ab48a8ebac88219c84f293c6c1e81f1a0f420da6

SHA-256:
249473568eba7a1e4f95498acba594e0f42e6581add4dead70c1dfb908a09423

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/9/2024 1:45:38 AM UTC  (today)

File size:
60.3 MB (63,210,976 bytes)

Product version:
14.0.4730.1010

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\powerpointviewer.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 5:40:29 PM

Valid to:
3/7/2011 5:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
1/9/2010 11:21:30 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1572864:mbYg5GUlhBpSvQwYVH0u+inx7mhKRgT2AZKfz/l:mbYg5GUTPSvQw60qEq4hqzt

Entry address:
0x2DBC2

Entry point:
E8, 7B, 39, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 24, 03, 00, 00, 8B, FF, 51, C7, 01, 78, 97, 00, 2E, E8, F3, 39, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, CC, FF, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 2B, 3A, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 7C, 97, 00, 2E, 8D, 7D, E0, F3, A5...
 
[+]

Entropy:
7.9997  (probably packed)

Code size:
277 KB (283,648 bytes)

The file PowerPointViewer.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487783671&Signature=UlPsZodIyVyEQXhAMZXgDKfTrQEhonZgjq51iTtQ75YBZq3vZIVEK6QmT1jBKZs7eK-VvEMtMx1yLBXvDVy4VvWIc4~wMFKTAm5om6ld8AU3kvactSBGWa3Vm9z1sUKRXGYimPpPCTHIN5bb~869wIOYAyUS2c7RZ0p5GCoq8Cs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486016477&Signature=FwjHASgusmU250F0hebgM0unh8Ohy-C9d0PBkPWfjh4-CeyElAohmOrVTv~mLUa6GsVvPsCMgf0nujtGlH3fkLbCL-QG6iOzcGGwQVMVQryHf1f4XB8HCw0VHV03938214Vo1sMmyA0iPP644OSGj~oUKuJt1lbhjMbMO8rw6wU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1485571211&Signature=Z73sVCo45AxNbKHllKnSKM2Rfslu3nnS03RyRZej3lwN~LFtarB--8uSBGVN5iR3FJwAckXaZA7F4u7IvTk1Spzk6ERBarahe2g6wrssssdrySukGE6xwpZzTCxwkdySjPppFoRbc3xfHoRIDSEsy67frHZXKORG9moltF-Mth0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1477641351&Signature=DvMJ3d-lSUdjyOjONWqYSexGAZwXZnVAhsV0JqEsOpS796Gmp6tnuOzlDFZmABe8F6n3Qt~0F7BRR-AnggAQ5CqWRzHuWDyzui4wEu~TppVJnfosmAde~5w~hbjeQWv1Fta471n6F7KGgb3XhEv-GBdKEALhTgexDvJEX33bCWM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://soft.mydiv.net/win/dlfile8ef1a_221660/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487109414&Signature=aCIvWTf3DyovBRqKPgvTn48~b9MJVm0VhAQ~uEii9qotvlPOE2ntJ8YqaQUlV9Sr2Lobbnm49Txd5Sw9WLusK7uCrqKoXXfVKSJXQ51eGS6TrAvtPdsLiaJ8pXLcXHm72Yl4kxm7wpQsK~wgfXiZfljLGQCzbUzSb~IZkW2-gvE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486953857&Signature=b8MUwDM1ha-tBP9M0OtrZNRi660GZElGdOGDAXLPfAaV7Ka6KNAZwzbY0scB4WQf60EPEaEX9HkktpU4g59H2pmq3N9w2ENEGCV4tS15NdNt3V2e0l~AkzFON7YbbTbE18bLywgXhLC6z9bCrDFWp1dPNTH1QVq1Txku5HWsJ-Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487968753&Signature=OTbQk1tI3GLQ0KrTvuc5LxXdkG4VTCdMHKZLDQ-O1p89rFQduB0II9hcLHFmESEHfSG38SPhH2mV7ZReOBT-~w9yI2ElbZlRPuKyigd2lQ8wbWS~j4WeLnPpuRcPFk4KziAWtbp0OhUDA1tSjF7pBKDqBnPXybkICZtRoIV6ZTg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486612103&Signature=OiKuEuetJFrtcb0KAtgiazicehHTq2uvbx0V7ISbyr65gfaWMbo7TjBDFmzNEKwtIC4VgHIJfgpuk1kbZ18NIqJYcmnxRy5Daw3ERESiSXvunXMKy9nefNv9~g~4DtTJbXbJYWS3a0uJSHOJWO8N1aE1vEo63hhnBqT7UceWdlo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487400256&Signature=dTNsUC7d53kCiRYVJscvfkdROyBrxbWMsL7knBvLq08BWGqRNVqzckwIC6CmmtxphMCTl~5Wxvh60rryp0xEKqzKUzMjoyfmwnJyoA3aXIyrTuCrfzKCn4iuFFClAGRu3lSQZ6GxhsiGCg0cenWiPdIiaK3ye2Pk2f3F57AqOdo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487269349&Signature=AfngaoA8UtLj~TD9MDhsyYesmMieUhbirrHcINdqbrj2ebs8rW0e-LpZsYNDPBG8A4sXt410RuQWWhKFj5-ajBAFifly~aJWo2-~FNbwT8DgUfdzWZ~lR3alkOYnPcNZwIRS29RrBvIj0fUl8XK0ITWV86Fhs6tFAkiRMWhBlDc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1484612685&Signature=X-4pyVkf4sifuz55Rs~llMh7HaunGr9Gvrcv~f36tLeeWIIDouEBnQ32MldYXRZsGm8TfeqhD8rze13bO3d3x7Qc3p5S1ZE8ifqrpqeJL8lbJywzF8-YLveBY1LFeztDg7pOgKm0W~qlBEsaakQDydmqx3CXEs7l9Fg1eopU8d4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486970473&Signature=hgTbZiyXNcVM9yNl92osthUviy8gBhgSyme0JqUGLFVJP7SLuDwlTCxSMJQpEUmmAz8-e-rcocuTxdOrmTKr1KV5PgYcJtB8ApJJAT581RmooyhPN8Ux8r2MV7aBLx-FmvkjIaMYmngHWAdjB7OoIYCI4uDsLwE709iGmNKOjBY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487890519&Signature=MEzNwB3QFJtAghqk9rZUEtYXFqwDlmiA2YHdw62t3kQcaPmGR8MT4thVJKWz3ktykqZRr3JGUIezJI68wAfiy54gr4RIcMPCuYqx2JrowksWnMUtqKT1PCqOx7tVirTr1mdi96HTXDtUh0amTiM6Bh1ANQ3GNJcIkN0NWpfgWM4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1484346152&Signature=DAiECOdHaeygaO6BmrESf7eNVHYz5j9H~bVl6mjXGlYieYJ~b8lRZCVaSBc5DAXWFmK2frFgoKf9ux~RqChVtpfGuHeLPVIB7orQTcXYyoVroA99XmjvPPTUx-a8gpKEA7Po128XT78lqMJCvxyVajLclwD~LwPbbhbmvowkqGY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486416268&Signature=E5Lr3EFvijckoTQBkXEpkfq1GR~IYC8MQ0ADJllvOwtOQURXNrN2zmjLa7j39OER4HFg-7g4Bu0Rij3uLuXokCnqdJ-KaeVS0iUsh1oADdMHwKCe6MOPhJRG-DGB~HKleFf0y56DRXsoe8gWyVfLNdrVle1pb9eI59bNBQRZ1OA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486173409&Signature=RpiPHz3KrOyee7MuTbZoFd2NnBjg75092Ou7v7VgmkfQKPBtq7OAD4Xh1q6X-RLnK3EuVCVXRPb3pzNglXOa2WDaGXaIiMSlq5wexCdmqulwpYqbg~hPNzFTJP2vUh-F2VSii-xo4Ucmd2Rx0k~ZqDkxK6szkTeqYaPKvDQYG1o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486681405&Signature=hBSeFAGKr2sASeU1CDUn5UJO4JxW-~KJ4xBUI5P49wZ5MtHAOofhDWe4T~4L6NuW1WpOh2CEZPXSKY-0jQSQq9iJXT-JPA~gHe9u~Blvp0rWrAEULUYW1KcT2PNn96SqUMLIh5v02NlzKVVWlxjpunitufwI1PkoMgrV2v1rceI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1487365752&Signature=CKMwhMHvzMFhVs3Pb0ASAA~CYcQZpU9M51h0pVcdvloFsZJn2kX1Oy-QFxvDAnOrxjdaSdUG-AP1CddZ-DI0m6nLGjsDWfmjMspWKs8tiAptE2VF8Po2SX4f9aJvDth~wDN40hHIsR4LIfIBE-2KvnwzGgZSfkeYkXJV3Ndldao_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1482687963&Signature=aIsmV~2H2d-94vvDwfSfUXJ8vq~pF2xUcHc9rguXYHzorhJsJUMNaIS2tfXQcMuiplI4nnraPWfbSsu34w5-M-fFadtfU5fS7Hz0jcNRBu2~AVM0gGaZ~i6tXRTPKjGHTM~NxvGJjIkY6jbcD9BLiWSwdVapXniLK2BE~j9gwos_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://soft.mydiv.net/win/dlfile1889f_221660/.../PowerPointViewer.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1482471626&Signature=I2FkfDv6iZoB3nZRuJ0IOwbhMYF8HT1SsolEcGEvRD5LfJ4V1zaf2sba9tSc8UU2p4DtYb6IRVG5eHM7HkHiny6LWVJun6ID1xQd-4xdCzTevZ28PChN4kokpzTXBRXgfYI-TQ5xKwgxruGqQrC2jRmuPpocXdSYS2blMtf-8Yk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1480509111&Signature=IP1-hvsWf1QX3VPB5Z-FZN6k4vBN3Z8T50c2iFrJBoDROD-XMJdb--4GLxhepUSf~as~ZrWds6lNktapB3fhjafFl5r9TfY7rx0SYHtlNJcZ1jmljaWgnGRm3diAQDYmSfNy8AUJh5wPHD8xdOFMFp89I0d6-rQPggbNWSfo074_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://www.conecptbitsfarm.com/6ZCK_NP7lv9mxNPHzkUAnGoxaw6nxOHtY_h0MdxXOwcidaZX56hYR qiZeQak2T91Hi TR70xYu2WP86_t2AzJVSZ4bo6mGUxfEm44NmU3fPMDAGf_R1XQYRCm7pGOi6OV KL3rVuA26hkqRNJvkP_6C qCxr9UYJk7AWqIjxoUwrojhdl9aNLmjg1ZWbkLJBzXbeeGS2J8ebdcZ0OLqBtT0yiOjC1PbhhW8vHL S9Xi 4CT2O 5slUOZv71tPq8s3lveoVZNcgG1IRbnUSUlfI 6E8qX_kd6tLFG2xB5dizIju17zLcJrvVmT2s3L2QEpRTF1or YlhD_RgjrhABkY3Q oZH4y_RGSFagcKJMk4rGJD1IPgKetz7U_WUXJkpK3rMWTFwAlwI3UXOvPmnEmsraIGidgEzfpQFpMwroUfur5mumsUq7SD2_bu cOzpwnLN9jnrvGQ 2vYS8_OoBu2RU3sieuhaedJtpflrIUOCW_v0xPw_2w7I_DbUsAmmCWXrnuT77fEuf869wozCe99KmGutRDJj1IoG_tyhqAC1uMQ4eQ=-G4AAAETd1trjDWmY4hA5 nCF66EmBw63f2gL6MXjOMYgbkiDYX0vJRtF0xhPH4Evxg1L3abZ1yf5VGnt33r94LuV0 A5RNgpSAW4zWaNn2U38QYM-e

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1474323260&Signature=Qd3apmhadimPHmoMCt4a7SbAwQwdFqPTz~st6t6k8Xrwhmlyz4oH1fxNpHyK6kVMSqDLD7Aw2dBd~3c6Qhzg7rcaw6TH6gB5eK5UwMul3kvpAek8nMVCKri5~pp9NRhnuIXiBiYoeVs79iDD-r5JpEf1l2WmJtBneUs-0tzNMWQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1485144763&Signature=iz~ZBIcKBlMl8ISsTiVFPuSVAv8QUt37NvY2zfo9PPnbPtwW7lotNVXGhZzkp2~W24I0V6~vPH039nWI~OhMuWqwFp65YR0JaLLDRPinEmnIEyN8N71ewdaMSsIQdnVDLMOExpRWeKVIOs4EETbm4E1GjBmKvvnb~hGMEfLvL4E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1478581789&Signature=N8g9QpHt71jwMsJ958MepGCseIXgjGF9mU9bZyvij318mcD0XMwmYTUWiEE1OTCgC5MfT35za11CEJJ~ocvRJB3s5hMY~SSXPTIbUujm0P95ulJ-u5KeqG9KwpjCLSpUSVENhnrlcgXOO3QW63iJ6zyOz08UadM5Kpyi8RTUIlQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1486511641&Signature=R4XBBjjePonMwy46WLip0v~F9vOq76olGwgu3qJW8lq1BHHhsgKrzUMsQSyLFL6Y3-kRp5O2uXzNm4jginruJ7nwfQgLg8ScJpNJHxH2G~p93NexYxExUVddXqeUMrHzaLWL-qNy99yaYsvY0VFVL3s6yXAfnfJ~U~UetCcyplA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1476571317&Signature=IiKd-NoLctCAU0d7JLKhtFbAdVWc0YXiuXHm6fZ8uvgFcP35r6Mle7PH7bC-zmEFC4fP6XEcklgKP81B-uq-uJ7W4SDiVvWYgVbpnoxIITInc-d044DbNREIjLbZWbLvOH6LoheeothGzRSypI-dVJb6vHnD7U81NGn7IFNuPi4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

http://gsf-cf.softonic.com/ab4/8a8/.../file?SD_used=0&channel=WEB&fdh=no&id_file=299750&instance=softonic_en&type=PROGRAM&Expires=1476332375&Signature=Csn92Aaj9n10HyaNgJ35qEWdPOjbM70SmG0zqXczPso2Uvvkgse3Lr2BUD-1Lh4psDyoiiUOX6~EeifBLpK1aPVizi8sT~3F-w-G6rd72Xg9fnFBAu~lJQByVbX9n-QBgGlKkPeTFIkCB6pwH97Rw~A7bZ7Yza0yw-KKsaPOpkI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PowerPointViewer-2010-en.exe

Latest 30 of 402 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.