home

powerpointviewer.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from visor-microsoft-office-powerpoint.softonic.com.
MD5:
97d1983c2a1c0e30bad6b06750a2d5ac

SHA-1:
af3fa9f1a5fb42a54eccd3d7b36eec04b6d2340c

SHA-256:
3ce2b3339ce6fb1a2aeb034d9eb0a1e9b31d8821ede688fdb47869aeb46f5e70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:11:29 PM UTC  (today)

File size:
14.6 KB (14,919 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\powerpointviewer.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:Ms9c86qdWKMacoA60UhT+7/1XWSqjZYgzMPiY:Muz6Ta8UgMpzM3

Entry point:
50, 4B, 03, 04, 14, 00, 00, 08, 00, 00, 54, 70, 86, 48, 33, 26, AC, A8, 2F, 00, 00, 00, 2F, 00, 00, 00, 08, 00, 00, 00, 6D, 69, 6D, 65, 74, 79, 70, 65, 61, 70, 70, 6C, 69, 63, 61, 74, 69, 6F, 6E, 2F, 76, 6E, 64, 2E, 6F, 61, 73, 69, 73, 2E, 6F, 70, 65, 6E, 64, 6F, 63, 75, 6D, 65, 6E, 74, 2E, 70, 72, 65, 73, 65, 6E, 74, 61, 74, 69, 6F, 6E, 50, 4B, 03, 04, 14, 00, 00, 08, 00, 00, 54, 70, 86, 48, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1C, 00, 00, 00, 43, 6F, 6E, 66, 69, 67, 75, 72, 61, 74, 69, 6F, 6E...
 
[+]

The file powerpointviewer.exe has been seen being distributed by the following URL.

http://visor-microsoft-office-powerpoint.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuQbii8AEbL6dh4PrE4qPspD ReVNx7HLap/PSxOhyzuVKgrS8ttlfngybquClf2zq4bVXqSZWEbue/.../EwODkDskAJ7biTR25BcBxeYw9WieQcx mBUkcRcw T9xSk40PvddKGJ8ytUHYOC2bfzan0kL4Lrg 7Sy7 8KJBi2LYwtC4wYFv408pXSnhEqTa97KaOdw4ZqH2TR7N3

Scan powerpointviewer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.