home

wordicon.exe

Microsoft Office 2010

Microsoft Corporation

The file is part of Microsoft Office 2010. This is installed with multiple programs including Microsoft Office Home and Business 2010 and Microsoft Office Professional Plus 2010. The file has been seen being downloaded from webmail.boa.bo and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2010

Description:
Microsoft Office 2010 component

Version:
14.0.6009.1000

MD5:
1818d024ab938e05c2d97a0b1c1004bc

SHA-1:
91974df7610571d6721f4f7bd05e410a8590e504

SHA-256:
37c77fbcad25b83a198dd35aa804adf0f04fb13f01923e99186490b638702165

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/16/2024 11:55:22 AM UTC  (today)

File size:
1.8 MB (1,858,400 bytes)

Product version:
14.0.6009.1000

Copyright:
© 2010 Microsoft Corporation. All rights reserved.

Original file name:
icons.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\microsoft office\office14\wordicon.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 4:40:29 PM

Valid to:
3/7/2011 4:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
10/20/2010 8:25:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:CUZmYH9NDu3RsXHMblnUc0TD3mcr286R39FJgMihUQL5Y:9ZmYH9N63RUGlnUcqWcy86jFJgbhUQe

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0825

The file wordicon.exe has been discovered within the following programs.

Microsoft Office Home and Business 2010  by Microsoft Corporation
Publisher's description - “Microsoft Office Home and Business 2010 brings together the roles of managing a business, running a household and helping with homework.”
office.microsoft.com
6% remove it
Microsoft Office Home and Student 2010  by Microsoft Corporation
Microsoft Office Home and Student 2010 is an office suite of desktop applications, servers and services. The Home and Student only contain Word, Excel, PowerPoint and OneNote.
11% remove it
Microsoft Office Professional 2010  by Microsoft Corporation
Publisher's description - “Organize projects, manage finances and build a better way to do business with tools from Microsoft Office Professional 2010. Exchange ideas with customers and business partners remotely with Web Apps--it's another way you can stay connected to your business wherever you are.”
office.microsoft.com/en-us/professional
3% remove it
Microsoft Office Professional Plus 2010  by Microsoft Corporation
The main features of Office 2010 include the backstage file menu, new collaboration tools, a customizable ribbon, protected view and a navigation panel.
1% remove it
Microsoft Office Standard 2010  by Microsoft Corporation
Publisher's description - “Microsoft Office Standard 2010 goes everywhere you do so you can manage business from a PC, phone, or browser. The Conversation View, Clean Up, and Ignore features in Outlook 2010 remove duplicate information and act like a "mute button" for your inbox.”
office.microsoft.com/en-us/suites
9% remove it
 
Powered by Should I Remove It?

The file wordicon.exe has been seen being distributed by the following 5 URLs.

http://webmail.boa.bo/index.php/mail/viewmessage/getattachment/folder/INBOX/uniqueId/2708/mimeType/YXBwbGljYXRpb24veC1tc2Rvd25sb2Fk/filenameOriginal/09b6425e94d5adf8231a2a4c94c113ab/.../3

http://learn.flvs.net/educator/temp/jcheren1/3937/students/.../wordicon.exe

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_3_9970_ALvmjkQAALC4VT2VCwbd0DzBeuc&fid=Draft&pid=2&clean=0&appid=YahooMailNeo

https://doc-0o-14-docs.googleusercontent.com/docs/securesc/7nkk63u95n8c7uvbu7o1vvuki9t428uu/1a703kusptbc344rp4a6mdn1sojk9k4m/1455451200000/.../16291489413400161114/0B-li9k0Z98Q_RjVXTTRoNTB2Wlk?e=download

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_3_13072_AEm imIAABJhVgVR1A1SKJtLICs&fid=Draft&pid=8&clean=0&appid=YahooMailNeo

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.