home

installer_microsoft_powerpoint_viewer_2003_2007_french.exe

The executable installer_microsoft_powerpoint_viewer_2003_2007_french.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from domseo.com.edgesuite.net.
MD5:
fc11ab60a3b4c3c5676865a60df3fb79

SHA-1:
e271aa65c575d10a385ad733a1c2ab7e719a61ad

SHA-256:
4e98e0c481a58111c81b52b57349ff118cad487374e3c30768342ed9658b98d7

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/16/2024 7:30:58 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.17.16

File size:
4.4 MB (4,620,832 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\installer_microsoft_powerpoint_viewer_2003_2007_french.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
49152:q7C6QTbYUWVwtf24bEUmQu1SeqgZLEJFKjN1omPcA20NeLcYPOwzuc:PxaT8JWKU

The file installer_microsoft_powerpoint_viewer_2003_2007_french.exe has been seen being distributed by the following URL.

http://domseo.com.edgesuite.net/installers/out/002150021600217/ax/eazelfr/french/no/chrome/microsoft_powerpoint_viewer_2003_2007/d/.../installer_microsoft_powerpoint_viewer_2003_2007_French.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.