Slideshow.exe

  • File Path: C:\Program Files (x86)\IrfanView\Plugins\Slideshow.exe
  • Description: Slideshow PlugIn for IrfanView
  • Comments:

Hashes

Type Hash
MD5 6451CDDA231D5F8860BA8F1C8CAC6BB3
SHA1 71157749289C98D6D67B173529AFE1C863CF8BE8
SHA256 20DDEB66446285B69362EE2025E0917CEAEAC40232FE46A51FDD2B98B95B726E
SHA384 AE86E3E3E57AF65CB2A701E62EC5E7E70CE508C1D1D03EE84A9BB273437334C3DE9FEB959242B64B3E3A90673A442BD0
SHA512 49CE686744E659DBDD25963FC726E65BB9AA5803227D4A35B105597320CA59F7075E15AC272482A6C79ACD220285528127E26F42DE02DA2FCB06C0D51C419164
SSDEEP 6144:6ia7LmGMr21Cq3mVMgcnir1w0rAhzwBk:6/7LmGG2Yylk1w0rAu
IMP 052C24626C0E133A7A1B051E4823857C
PESHA1 590767F29182430E3DBD9FFE254BAAD2121871F4
PE256 44EA554B0A796E788D37287B8D4D05E3D0F0AC8B9D13BBD68077B8EB3C9C0CD2

Runtime Data

Loaded Modules:

Path
C:\Program Files (x86)\IrfanView\Plugins\Slideshow.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: The file C:\Program Files (x86)\IrfanView\Plugins\Slideshow.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: Slideshow.exe
  • Product Name: Slideshow PlugIn for IrfanView
  • Company Name: Irfan Skiljan
  • File Version: 4, 54, 0, 0
  • Product Version: 4, 54, 0, 0
  • Language: English (United States)
  • Legal Copyright: Copyright 2019 by Irfan Skiljan, Austria
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 4/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/20ddeb66446285b69362ee2025e0917ceaeac40232fe46a51fdd2b98b95b726e/detection/

Possible Misuse

The following table contains possible examples of Slideshow.exe being misused. While Slideshow.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
malware-ioc misp-kryptocibule.json "value": "magnet:?xt=urn:btih:sgrfo3qqyb6tk7rdn7f4o2gmaz23wpd7&dn=Ashampoo Slideshow Studio HD 4.0.9.3 Multilingual.zip&xl=73299714&fc=1", © ESET 2014-2018
malware-ioc kryptocibule \|magnet[:]?xt=urn[:]btih[:]sgrfo3qqyb6tk7rdn7f4o2gmaz23wpd7&dn=Ashampoo Slideshow Studio HD 4.0.9.3 Multilingual.zip&xl=73299714&fc=1\| - © ESET 2014-2018

MIT License. Copyright (c) 2020-2021 Strontic.