home

wordpad.exe

WordPad MFC Application

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
WordPad MFC Application

Version:
5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)

MD5:
81c9b53f2eaad52da20f0dc29e5c4861

SHA-1:
d0a2d365aa286bab7fb52485dfe14ea8a54e09d4

SHA-256:
92678e4f7171802f6138bc15caa4de12d38ae0643058106fa7052ed38a43be19

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:06:43 AM UTC  (today)

File size:
281 KB (287,744 bytes)

Product version:
5.1.2600.6010

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wordpad

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\wordpad.exe

File PE Metadata
Compilation timestamp:
7/12/2010 7:55:01 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:l5BgvadeLnJiYC+up5BmmbKaRwmNN5pYkZt1PKgjfR/W99:l//miDZ/JKcFpKgt/W99

Entry address:
0x1A8C5

Entry point:
85, D6, 72, 07, 69, CA, 1B, D6, 07, 21, F3, 71, 08, C6, C4, 7A, 80, E8, 2E, 88, D6, C7, C7, 4A, C0, BD, F4, 31, F5, 0F, AF, C8, F3, 89, F1, C6, C4, A4, 33, F5, C7, C7, EB, 88, FB, 7D, E8, 00, 00, 00, 00, 78, 09, 8D, 2D, 71, 0F, 5D, 8B, 0F, BE, DB, 30, CC, 46, 81, FA, 88, D6, 00, 00, 59, F6, C4, 16, 87, D2, 4A, C6, C6, CE, F7, C2, 6C, 6C, 55, AA, 0F, AF, D2, 69, F2, F6, 1A, 32, E9, 13, F0, FF, C5, 77, 04, 88, EB, 86, FC, 74, 08, 81, C7, 87, 3A, D4, F7, 88, EB, 86, DA, F7, C2, 00, 21, A5, 04, FF, C8, 02, C6...
 
[+]

Entropy:
6.5796

Code size:
137.5 KB (140,800 bytes)

The file wordpad.exe has been seen being distributed by the following URL.

http://dc342.4shared.com/download/.../wordpad.exe

Scan wordpad.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.