home

microsoft-powerpoint-2010.exe

Sifufi

The application microsoft-powerpoint-2010.exe, “Sifufi Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Sifufi

Description:
Sifufi Setup

MD5:
98b0b9ec05809c2fece5228e2fe834c0

SHA-1:
ae2687b70a202a660ab26c1fdc6843713acef3a8

SHA-256:
cae4f03d3a30a27317ff6a796bde364719dbdc73f2a8acf480f5be4f4fbad548

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
5/14/2024 10:24:24 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.14.14

File size:
1015 KB (1,039,374 bytes)

Product version:
1.0.3

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\microsoft-powerpoint-2010.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:5qd75mBnxbenL3iNNY+wNg1Z/MlJM8eHMt/lR8ybNSoGD3EIGAI7C4Welt:5UIBnxenLyMji1ZUlOzQRmoGQAIBt

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file microsoft-powerpoint-2010.exe has been seen being distributed by the following 36 URLs.

http://www.nowapplicationgift.com/c?x=LgCzchyEVabYPOlXgO2NIcwqYM78ZqA0SPHq8Bp1XHk=&c=t9RaYo4Z2DMjQ/0RDZjxC0/lnd/rEzDcVfkjogRUoFDWsojMlATySUGgX5PIgj1OuNWG3N/AbcDkrbNduwBkuu7GDhJFHQf8SnWZzYIicFcvt5HfgJ5/PHTEqcmdnSWQ0HdDViI4bchKlrTbC9p7s8Ho273zkwhGSIZpi8tV6D0ppeasvPdE2IH6BKSfOxbw&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=cH8QH4X0G1KFpZUAd0JyCZF9ITFj4wZULRqzAtG5Qno=&c=6ETzfpfImvyfoFYfotMG0gIdyR1eFyJda7z1aSi2mG5WgCcX/v2uxlqED8EwZC11oPC wWaJ25SCxgbefjCoBGb95iq6fz09ISVPsBwgySLSoI AmmWuaEnzNiHfpSSzGMaHjHKyJwaa7jxXqOc5bgAXsRBq8Jty409VFvN5RuDXHfwl1QSnURoQOFcH7Xub&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=TeFS2FlRrSkRqc8ERw4BTfzU99sajYPr3DOwTq/Bgzo=&c=8YMDWQgQ99MhCtftLHkTLwn7oxDK7EGXO4V9dVQOmE5dpsOzRZ2oYRmevWvJGjbxVN/LpTJzfLYz tF5BeyRgnE Z/HvmoY9R/cEXct0uJKqdHaAdiW 97L2WEeQsqie1co6/0aPaHCkS3ZoMV9xdeB4C CQrPhFVu 2jOIWM3nAbLjnp2Ymh/B4lWqxTgph&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=c2/LuV pqRi/OswfE0SOON1OCrXBotDylIBnJWP8UtE=&c=tA HC2WWEEVv5cAmqM ArUomHm8An6mCBcFUcUh3eKwbEu22CkF2i5bVYLGN/oobiGo8152iR2d4/8umcW7YJLAv437hykz8 NXlN/GbwaRyWHilVre9PlRdl47ymbqb4LCV7wltstoQV7/FJCGB8jfvsI8O2B/1URop86XBGCegJLkPQH9B03CJcvKurlQD&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=kE/GD00l/ZwBw6mkZIFS32nVgUb2rq7Uz/A3XwM7hj0=&c=xOgq92/l63dlSG951cxdhufEo8D4qXv/jRKiDIIbJdKNoizXz9Ss/ldnmlxKI1RXKJSA 3yQv4uclUwXjxw9mO/kOILhh97piw85 QneYsrPqWw43BxMm3iMjBopV0zrS/njamugpe3onuw24doQKUkvYLFFepwq6BbRrFNhKjmll 0CVBxMoFP1hbU/r9Jl&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=UyYv3NIKd3jCJT7DDNQ 5yk9as5aNsIA68juDoBwnro=&c=kQK84wEP2mvjsO12KDVah1thKQzyMzDlJzxIKXKHzLI7Mo5PdEU3GFmbz0l13Gb6Horvieq5YS2OKCWd98jgOH2irAo6AKiRgv hJBwinLaT4Eb9FhSmDKTeKReM9VPNuA/mYs2xck0whGdz5QA5v4GQWqo O/smN6vy3Ul9GvMJ8EGoaaUTPN06R7bm fff&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=3XdFvT5GkF/sXIhDaafsqR9v8R4e0HUQCYDhwmerCbc=&c=AGGbUfh8a8STs0ASDpEd0cK3nfCotwLY3n 7bmExa42OllJBM2WlKGmjNvkCK8KCFPFG/3OFKl0JgZeAnRtF9nslDYImwYYQYg1VNfTscPbLebKiL5nM81 h6kstIDUDGTghGXGfcNHzNWFsSptiZ0USYetH83YCw5ezXT2IxxldMLue/0OUu6 QRekc jHQ&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=7NcGGWm8z4iFO6y161lQ 96BH/3TAdbZ3UyeebHQiGo=&c=IuK9Bd82BjaTFwzP W746RFXJJAbF3GrZ5/dgZh9c/wHnIcbJbpTrDENEB88aMetEFFhPbFTXy0IxkODeBB4K2zsXfOAJey41e0QS8BCIRroLgPwhqHU1OHt libslJytaX/OIvX74qzhjkSymRxMFUnInF8zspOfpRhpj20h6fOrG4wyVifSzfgWXvmApc5&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=seSJQv50v3lCcc LHi3dUnd3SS9NwXpqHEICQkoXfGU=&c=9XnHLDi2WtDyUydTRN8VhVWT Ol/wKs72yvk/E57CeH3vjxDzTK3Sx0tTboUNGCky3Ys4FQiIFwnurp0LHw8KOU0JnNRtOLEEdI4v1OTGpVGkPAcmt Xh6PCZJwnkgMLkVu S8O6z721TbdMr/rO1mUEflMrvWrCIF2fsdtwOt8Oc6tromMFXz6BWl5QzGCv&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=LkK7S9yd4xVDKOBuRzjXeSVS3i/WzqFedP3KCwKznyo=&c=IvxFGZHoeHbFSBlZu4kYzaW GPD6a8NQIe5ci5l8aVLXh0t1D31kPCcBOS7RBG/R8O4JAx7/fPh1DXIQFrYOwqSE1i5ivNk0EaHqHRrUKUV2GDWh2cDI59SzU RXN0MTq8cV8iTVlvqQrLiLBCX01CfM2QzId9Q9xPxBfKKiNlP j708MWbWe0le/FEf5vvG&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=ZcfxoNWra9nkO62sPr0z4CqQOo7G5PU9p7k3C/2doyw=&c=SuBqTIlCWLNXJKI7ibaRyeHkvxflGvkx4XF7ZX04AzegGCQsw kaKSp7xBciNnb1fEOdGyRC1vlCzL3NaBCUjCggvJmKvEAgoAbM jYvpXE5Q9TRJcL1rDD1O5T3036MEe7nOt11MWN7oMCPeeTeFHLZQAu6OXusZhdWaDKjrLEe/DU290qYD7WBmO9XAxqo&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=/2jhLmmGbazIS HIgcbd51gsW6PlQwxvYyjyzkAg2GA=&c=Fl4mnle8bXcK6D1mn5b6aESED DOKZM2Eavch0txR4jbGu3Ez89a/KJTemPqKI9jHOtQ0Y31VVfDC6zPcpQa80Zcd2OWprdLvMJveMRVwXAUv5OOmeOwKeor/9L5lv1gsoaVpZcFhitWTRimR1GajnUdF9fVKTqIj4v1jiW9UuzQLqWMoxec2SVeQg72zqy9&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=3E2rZd9cYtUfjvWdgeJHrFlOGhnMNgmDnFbfqe7lBCU=&c=6AT55VWfvGm8O AS0lu9rgjDOKfUyZ2buv8c8mDgDjSR5llIMZvlQXnfEhWRjm1dn CfaL78iO6LE6o9TPgIEsW73pKmZlbsmX1hRrCr1C4x6ZASD9RcRpOzR8QGr7XdukNaISX UQdkYAYyaTWzHzNSJwqdoCVICz/IPOIcQsbVevpBrgObC lMxJ uS1rq&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=Cthi387VUQAIsbmbrbKhWFMrG6g4Q1CPwjgIvXZaM4E=&c=mLfy2in652 ZZRcNQwoIrhMsITz6Z95aYhyztJ6V2PpPnY3SFxVg6p/V2zNlVhDse/ 9844yG4WEadxUfIWUGXm rUG/haDgtBOzZw0axzC5xSQlAhPPMRMB77HzrxbTRsGNWqP9otXBKeZVCkUux0R6GZSamtJRRMS6k9Vc QKavSVVGXYCr8VKaS19d0R&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=Atwqa5uUucwq8u05SmDQ80nworZvbusSGIjjbKrjUsI=&c=4xNaYcrWBdTPNUDEMggmsIfUnXOu1AO7AUFdZiqgcAbHGfNKL4gLmTp7 PVYskuE0bgQn6LulUqXcfd1XstzZRHKKayY4MT 2EAEY6ij54zmPSofw7riEdaD1m8QjcMzWzX3oodhTTM8egmfoEDHoqSkwH60PaOrznV55VEq CBWXgZplyBo/ioA TE2Vsfd&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=CfUNclZldmDE7h 9uauasrvja2VKctW7/he/eFOE5s=&c=HUGMJeOS9Sh B3G6bpRBdj4VOiw2KHZX/f9hMx8xMffmcwGIw021/0XcdvJSoIyzeuHwnoDSmCyYSpV8maWBWr0sZspHOr0oOgcDcYDC4vNyPf/6FVFtk1 uu3wSmvoNRVl7KpzUOmyL2LnptD2j6IPe1Z2QBnAvVhdUJG/sPi44iSB9rDOV037B3v9 ETBK&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.vaultsfarmapplications.com/c?x=hEGCzTvs5FB7vmDBOeW3ucsG7KIXo59V1SHBGzJ8Fig=&c=xGOZ/KxTcnjHyqCYB7tXfvSQvjj79dD1Xq lpOhjvam03TneBCZmYNXrAGQb3gfeK6kIeTcbdElTaTvhyQ1DjdL9wTbujhOaBBqnrKc5sXcEmmRuS5/XdN56AbRyzmSaY0d8hJWarmGN09DSg79vfoh76YwKnPUhZIyL0XdgoNnF6Ia6nnVD0FVpDBVWdKed&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=T5cI0I3C61v6XPkS1IQ8pT5rXnNBQ0t8xJ MWIzEZx4=&c=aTIMXztVlcuhIuW4aSiIqqqAViVddRQ pII5ZDVrAGyrZkONkvc9Nqis1F7CdKZ8bO0t3P9YsCOyAlEX4X6GEmuWcPVxG3cChqfMQAUw7vwnciNHWuHIEapgwYBDcOl/ Xz1Brsw8202m3QMrR8QsMGD6eCkOchWKz f2h5J3TPPViTuGaxmRKFQoAY0clcC&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=Y7sr4vaVEey8dZh7aLDKesslPEfvvhKJKJ0Bqx9FxVw=&c=vPneMmwWMAhpOamQxqHAOjbKIYMCv TAEtEvGkoKV bIf/QenECXdLgqHL1u W4eda0ACPqXuIFtcCzzNlXRmEkqGyhvQlel1aZQ5ZJGscgqYPE9btgG6ejsyJ7oVVwuTQFs9ci1E05X6fnrn3mlQJntcJZo fVYDhljTcOW8LHGK0sIETDzjtzJTyqAQwIe&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=HpdlfFoMIDhZRH/WSQ4uX4/qsBdAK3QrysZYMyB5LTo=&c=8PtaEElxHhs3gnoYP3WlSd3ZQa2GRIV295kpfO6J7LH3hfJIl6o3qgiuHSi1sFK5U/y7vXIeiEoEIVLxxkbz/qjELvJFlJqOUsG t//3odYWmr/FjlKAqPiRcQfAj2hOHEVoeyKPA77YtaPrOEPmJWVLpIqMYyIKrk1iDR2B2gSrebjcUBtmUbBFaA0TxA47&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=juQ09iQqc1iZm8Jpkpeo5iPzau4rpIR8zUzQwjUPkog=&c=uYor8jYwvaAGEPflhYHvLBTe6gSLOAbG6x0wUuNca6L/K2Vz3vLYApz5lIBMANLSw4hGw1gZcOvT0Hc0wWhWKyHuzfC Rw75CaJRZOozObC0I1Tte/Ub J6WXd5eXpE055Rg6yffmtMceNcPUiL25JEBAkhTuRvoluNaIC881fPwDcrGhNCuFZL7lRNbBso&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=aRYUedmims5Lnqbwcz8dZqZ4MQmmY6Dt9hPt 6O14XU=&c=hHetRxqscCN9kYEQFsGNHvu8K9kHdgQVoyqQABUahg6TGLglfMB0aSvGkRTvAgdFC5jRu1394GfH3WPodMnxaKtExUbO7JPv9GCb2kgqiOfAG84RSpPwc0iDgRpA9NsuU 8 i/QvznnMjgNuSxUDJ7 B6PHTu8471KP1DGrpFKiWoP8aJIPrt/7d xx29qdo&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=jg4cXsWYgE5aPY/9fLjGJ/laHsGWwWxuZYwKRqF11i4=&c=jIOqiMGDJBndeiCXgL6aCbPOlCmJHc4XLcErfkfjPCkJHHuVU9tmtGDQq23fDB4mQYTm0mcZjqCEIPlK4lpNaUy/QugFpanz3SkFEEYviECV4s45rWNnV46ilw2EiDbf0kaIWQtL/oq5yh421tywg3gZ/EyQtVp4FjTjrrdpODg1D2ZTVDLgOEkcXxiDkVv2&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=nywrJiXODXg1/g/5nezkai73chIa2fe/fnpelPrdjys=&c=ZKCzRgx8oBrnzIKP5oNRkPc8ttTaQkMTx98J68RHlkBazqFf2Lz2g4ZzIHGmGzzVC3QvelnHNhVNE X9cUOSXCaVUPrTEFWG5 jwUmnAxR5U/iflprkJ9mULA6lGYYEEOShaCqbq/R 6qWKoPJR/JpmaT9Xc8UQfjQFK8yt NVBrVZgv/4DQ l6k/izSKPv&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=4Vw6VoLCEWa/K0kiIhc/27vhlqNcKy7LA8XazEhNGLE=&c=hoQOWbd6Ki6SLnvhQeqqE4KIcK05xU6V4V7o6Runu8d1X/kk0B8ahflCUaap9tvzyamSAhEfXpn5J11JIKVcA5P0nXIhpAVLKjoVxTyl1rbk09TQ2NiQ5unmxCInz2QWnDxwxAzsDy7whQgZJgqZTlCbyitC2bINGN4p6Au1F ZNI0VtG0FCMzHtowxWsfTK&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=VujXn5ByxWy4Mlrgb0hxVjPv9dGS CdShFWRr5neA70=&c=cfYIrHw8uREs9XDWehXM22xOQdqbFFF8RHfEaZZ6dC/FqoIKYMFZHe3VCSbkzGzAcWbCiPq6BN3eg22qyMIh4MtHrqUiUKUDRY0J5bfVR0g7G4PhcXDZOaGDvx6k3hBVcekIvtUtOfnibPSSJgwdO9f59HE3Jvg5hH6a3no1kKwp8IMyqyjFRXNbSKPEoJ1L&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=mRmpQ2ZBWTy9NY/UkaBmKKYa3n5A7scqhlly63CgWas=&c=aqUsoGuYvH52qxc42IsVxCQeIl jIH9P3xA4waEEgo08yJwk toxGzmoDQ4i71hCtg61nMK9TZD3nPdmtUK99gxVi1gPuv97N7d3rKwovKrmtNN RHhxhYjyAYxOLS/xxku1R6S4LZifBPzU/Oq6Sa04Tp ItA7FBfJjUE46IV/ezIpTDbHiwF1dz0ykeBuW&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=1jWjoQriMujAndpLzcUWmMPPuLmlhnx8wwMvpCwtuS8=&c=rBzzDNPsAcb3jY/ctaQgzwkzoERz202DrYBYZRuKu9rpqG LTkcFODYgbDPoW5pTyNkOPfANectX1TnIjG3rgamFDod4u0BTLKXlAVbS7ksHUxcCa6HK7BZEOwqVAth SGqSHYG2nrqRck9s3bUaTipYMEZ0UWihTdrWxzhPYn/zhWkFiSGLczQvGzu007TL&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=ffVieoEHTeEjOKp3t8XCKY/EqZXBFw0g/s8d4Eo0ic4=&c=1QC2A64OqGTfB h9XnLS5rnkGlAoWJ70FUeU8LCrHKFEwA7l3e qE6lhYVv2weKhZ4V07MHNMzIWdGU31M5MbKc1AAsPZmtdmW7FnrR8h7wQ2qHHxflQVem5Nsv J/a4HH9AS1LB/euxMWz3nCLXSe1qmY MDGJ2iu1tZmTnj7wlNeMk9HMTBpYW8o/UMz/X&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

http://www.nowapplicationgift.com/c?x=uZc/0H6TT38 44ONpgNCFNs3fUZagBss0Kcq5cipk c=&c=QwFzPPi BqbqeOi0k3IuRQ vOUsyKTg6OUzCazO29HcMphG0a73jtKypzC4JB99 sNxbdtvCh0bJt4bfCmwCqWrQcLdYoJjaHb5v7eh8NPI2H76bzy6HX2CeQfUNjD4a6a6iS bTRkXkNNSIk10zKpXAyqLvpRdXEc28AeJ6OCPXJ8ppor1d TqNo27b3Q7x&e=0&fallback_url=https://secure.inndl.com/.../microsoft-powerpoint-2010.exe

Latest 30 of 36 download URLs

Remove microsoft-powerpoint-2010.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.