home

powerpointviewer.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.tamindir.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.4518.1014

MD5:
e3fcf974b5904bdbcdee4505d7a76355

SHA-1:
8fd30b1b93ce53f9907302019cd5322941de4b62

SHA-256:
b861b6ac6cc12a442af987777e325479c279fe0a2637456c3e13b76a2e6229f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 12:43:08 PM UTC  (today)

File size:
25.8 MB (27,098,856 bytes)

Product version:
12.0.4518.1014

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\powerpointviewer.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
4/4/2006 10:43:46 PM

Valid to:
10/4/2007 10:53:46 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, OU=Copyright (c) 2000 Microsoft Corp., O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61469ECB000400000065

File PE Metadata
Compilation timestamp:
10/27/2006 12:02:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:gr4mL9wydn+a/v2dGn1u2S/1umn3iAwvhPvMPzeYnTTXq3lyHfhhhw2Cvk3avWfi:lmLmg/vN3S/1uS0sNJ7w2C145egTNi

Entry address:
0x56405

Entry point:
E8, 26, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 70, B9, 00, 30, E8, A9, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, EA, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
510.5 KB (522,752 bytes)

The file powerpointviewer.exe has been seen being distributed by the following 50 URLs.

http://www.tamindir.com/indir/MjAxNy0wMi0wOCAyMDoxNDo1OQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0xMSAxNzozNDo1OQ==/powerpoint-viewer-2007/windows/.../

http://indir.gezginler.net/i/1432/.../

http://www.tamindir.com/indir/MjAxNy0wMi0xMiAxNjowMToyMg==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0wMSAxOToxNDowMQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNy0wMi0yMSAxOTo1MToyMw==/powerpoint-viewer-2007/.../1.0

http://www.tamindir.com/indir/MjAxNy0wMS0wMyAyMDo1OTo0Mw==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0xMyAyMzoxODozNg==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNy0wMi0yNSAwOToxNzozNw==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0yMCAyMDo1Njo1OQ==/powerpoint-viewer-2007/windows/.../

http://indir.gezginler.net/i/1432/.../

http://www.tamindir.com/indir/MjAxNy0wMS0xOCAwMDo1NjoyOA==/powerpoint-viewer-2007/windows/.../

http://indir.gezginler.net/i/1432/.../

http://www.tamindir.com/indir/MjAxNy0wMS0wOSAyMzoyOTozOQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNy0wMS0wMiAwMjoyMDo0Ng==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0yNCAxODo0MTowMg==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMC0yMSAyMDowMjo0NQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0wNyAxOTo0NToyNw==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNS0wNC0wNCAxNTo0MzozNw==/powerpoint-viewer-2007/.../1.0

http://www.tamindir.com/indir/MjAxNi0xMi0xMiAxMjo0OToxNg==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0yNiAxOTo0NTozNQ==/powerpoint-viewer-2007/windows/.../

http://92.222.80.201/Counter Strike Source v [CS GO] [PL].exe

http://www.tamindir.com/indir/MjAxNi0xMC0xNiAxOTowMjo1MQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMC0xNiAxNzo1Mzo1OQ==/powerpoint-viewer-2007/windows/.../

http://indir.gezginler.net/i/1432/.../

http://www.tamindir.com/indir/MjAxNi0xMi0xMyAxOTowNToxOQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMC0xNyAxOTowNDo1Ng==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMC0yNiAxNjoyNjoxOQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0wNC0yNSAyMToxNDozOQ==/powerpoint-viewer-2007/windows/.../

http://www.tamindir.com/indir/MjAxNi0xMi0xNCAxMTozMToxMw==/powerpoint-viewer-2007/.../1.0

Latest 30 of 127 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.