home

pptico.exe

Microsoft Office 2013

Microsoft Corporation

This is installed with multiple programs including Microsoft PowerPoint 2010 and Microsoft Office Professional Plus 2013. The file has been seen being downloaded from iufrontvirtual.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2013

Description:
Microsoft Office 2013 component

Version:
15.0.4420.1017

MD5:
4a87955ee6aab767298a3bbdaca8e34f

SHA-1:
676ddfe48f63ac5e270ec21560736119e623a676

SHA-256:
a2eafc233c49a0fe06e06edb1ba8e58694a15de8bdb4e133adc37068e519ebd4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
8/10/2026 11:26:50 AM UTC  (today)

File size:
3.3 MB (3,509,376 bytes)

Product version:
15.0.4420.1017

Original file name:
icons.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vmwarednd\75a48d52\pptico.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/26/2012 4:50:41 PM

Valid to:
10/26/2013 4:50:41 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/29/2012 12:30:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
12288:o0knX9Y5Ucy9oexxr5UcykDuD7fcUcMez:oxLe3kD0u

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.2964

The file pptico.exe has been discovered within the following programs.

Microsoft Office 365 Home Premium - en-us  by Microsoft Corporation
A subscription to Microsoft Office 365 Home Premium lets you install a full copy of Office 2013 on up to five devices and also lets any Windows 7 or 8 machine temporarily download Word, Excel, or the other Office apps for use on other PCs.
www.microsoft.com
10% remove it
Microsoft Office Professional Plus 2013  by Microsoft Corporation
Publisher's description - “Office Professional Plus 2013 is the future of productivity. Office Professional Plus 2013 includes Word, PowerPoint, Excel, Outlook, OneNote, Access, Publisher, and Lync.”
office.microsoft.com/en-us/professional
6% remove it
Microsoft PowerPoint 2010  by Microsoft Corporation
Publisher's description - “Microsoft PowerPoint 2010 gives you more ways to create and share dynamic presentations with your audience than ever before. Exciting new audio and visual capabilities help you tell a crisp, cinematic story that's as easy to create as it is powerful to watch.”
office.microsoft.com/en-us/powerpoint
2% remove it
 
Powered by Should I Remove It?

The file pptico.exe has been seen being distributed by the following 3 URLs.

http://iufrontvirtual.com/aulapregrado/pluginfile.php/12498/assignsubmission_file/submission_files/.../pptico.exe

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_2_71067_ANlwimIAABAZU53 6wAAAPWVEgQ&fid=Sent&pid=2&clean=0&appid=YahooMailNeo

http://hs.franklintowne.org/download.axd?file={7DE28459-6BFF-481F-AE95-8CA750B9AEB0}&dnldType=Resource

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.