home

wordview_fr-fr.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.6015.5000

MD5:
c48ba3e90f251dd41b92e7a2b24245ed

SHA-1:
dce603d9bed87170c86f51f6e0f4935ccedd92e6

SHA-256:
a8dfb4946429b509e71039f1f781f8bd7daf290918fe3dea1e3e27e935bf6d1b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:12:54 AM UTC  (today)

File size:
24.6 MB (25,746,416 bytes)

Product version:
12.0.6015.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\01net_word_viewer\wordview_fr-fr.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
3/29/2007 11:47:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:nDrKeCkimQFoSf4dlp7Ce8bqjVeVdJ3GJEdKOG5X1i:n3EkiwSujk6TEEt5Fi

Entry address:
0x56569

Entry point:
E8, 22, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 90, B9, 00, 30, E8, A5, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, E6, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
511 KB (523,264 bytes)

The file wordview_fr-fr.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1434605736&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=H1CQokjdvlOCvY920~5qkTwSt7g88q1~dVtT0sPZh3WeOATa8qQ-xq4-dnzy41niPdNl3GM9oYchV71VFQtkq~r7qJNsdccK05BmiucPxm~Qq9xWobDPkc1W6-0jiPpxWd-z0Yb0PCHaOo0of-fIr8krDSeLBKM-HN8gYnU8Sj8_&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1448328317&Signature=TCWBJuGxkmQvf7vPXVh2wNKNQAl88YDiZoEKgbJpoY5wPqRd9kYKKB5UbfetAjO7gAc1MZ6wAOi4-gOclZPKmP9yZiu8kVtFkmIlSzWjCHIOD7YD-Qz0khQDM2X2TEyBCfBHN3DT1XiTh~rDkTXaqgn1Lla1v4ewcRvzcWhDs6M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1476731097&Signature=MAlh27lqSquXnWGTO2eTwZeO2mNYbZZuI4RTHdOE1JQCy5SRpPNRxBlaGivSAwuQoWwZ7Tgfd1LLYNq0EnE~6g9NWdNMvAHH8Cl5zBkuv6eBneXyCIY0wG5CxeD3sVvsd1KRJf6ILfVFz6BA56JTwGvkz9Pp4QU4w8aZsWj4KRk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1449204138&Signature=DeaqpUCnWdbUhQMB73mov1HZabdaZGzmXjXf2PjD7zLOtbGAxs3sH-8OK9JCO1WHdHNEzDR0lylIK-LTOFW~wddnSJaB2bwvJo34re~8O9tduXfiDuATkQQBRMsbJLK2uF4ubdX0aFRkVjaYPgx-eYf0LpKpA2EY4DtwpzHTVHg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1423196557&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BmIDjnBI2FbBtQMlNtT5BwjVxnQl9dxwjln0wpYk4XJ-rkoRAoSImRCT6QXqrE0toYgM6Nj8hCHRgC4pSu5v7HUkcAyKfsG6d2Aft5Oym6c1WGZ-XvqlFeW2Ixbr~mUmqt2oGWTcBTIOzLNhgexj0ynDAcyWN-fNRB5kn80KH~o_&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1443909739&Signature=eqvL-IRKZqCam3NqaZ4w2vOiEHeHsnYZsP0vrGmhW2Dw8XqBAdgJkRMMK489lE~wHwvVD0mPywxiKcGhvMCcpGMk6JX0Irt0ZjNwan77p504EHKlFB28b6xY45wvMbHPI8pIIg-1gBlx7U1jfg-0sOaeaaJuMsMtgynCO4o2~Do_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1445910060&Signature=I3~RR-1euL39BY7BPhQmznm9NaqjruyyLk9XUMDMqJmHYGlmkNwnOeJI5o4pnDnc8iSFG3MMmCITCc9zWFDwYFOc-hT7ViG6ZmYerC66y80pWgLmJcmVoQfwCZx3D9sEpV~ORXUomei6SVsZIW-rN3ITEFgjpBaVkbjjUZgwiPE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1441518583&Signature=Fit4mekxA1XyuC38EYU~fnARxPcacVC5MO-manMZYn07BrX2TPp6pxE4r4EXGFBYkeTDEKDX0IT5wqYnI3wcwHuFMgZvSf34NwSEybeNKHrjc~SQ5KLKl5PZ~i7m75vatWZ-OZn3g8LnVTLi2KIdis71Ne8EoIwNJz48-tKT-98_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478928855&Signature=TNtm7Gdk48zuawEdf8k6f83hc7r10z6h3KScNvC0-n-7s29j-9MPV2yitdyWQ92UZTrU-VY39GKLUpLb0NnNvmfAXyoBDnWQOvRQgopES7CUGeXwNBWn7JWbrJMywfITWz9aGF6UAB6RK2H~GS13SIzdFec~9w2VqX4txGCicXk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478068302&Signature=WigYmInLr3nIPfLHlD6M91qr7Y93-3HFCOkeZL0je8Eo6GWJyxTKDjQ9hSP5TOs461y1Kd6m5AyfGZA2YAyIoP2to2vBkSgm0GWE0KHexIjvxWQXB-KyAm3py2w9pGJxfvwp~TQLCfUpUuyLeySsI6436VJsf-po7Zp~kT1~DmU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://lb.cdn.m6web.fr/d/c/a/df27b2ba3635a516ea2238e39eb8c3f9/58680721/soft/.../visionneuse-word_2007_fr_40855.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1474536477&Signature=F6s79GA9Br~rFPpVx7gMzJV67Md38wgZd6KmDyYDcQuEmuxUEQ285-YKHO1OSzLwpaltWFhpmE-BhSWsbBFytY1uY0PTy8dcwX94WiJjoeJLoC2OyIEDs36m9JvnpJVikJIaCUUyU0VLK41iIbN0van-AM1lj~LIIfjZ~ET25XE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://lb.cdn.m6web.fr/d/c/a/ed7520d4ef9ac62aefc9af311d801b1e/587be1cc/soft/.../visionneuse-word_2007_fr_40855.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478912058&Signature=LKZPSSyn0x0ikY-uk~ZFYDSEZm0gDV1DE8u-qFekMBHFNIyy9oHuhv1XC67r0WEqrIVe6gY~GiOvatBi5R6bQhuGapBma9SKEFXK0jIrXeXKoXQt3E~9dtgbCrfLCPlNbKO-cnAT1cXaEIH8HMKMMKXstXKQ7cWAVeSUvlMskCE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1477776129&Signature=OelwedOfaJvKgYrW26hDjiosvxA1QHcEaF2gOGC~70UUF8yxKDl~jIddlf8pVkdXg9GxCWq9hBs9CXW8zCcldmRaFx1-UtWTWZ8sU0p-22W0YDcZ7cG5~QoaSGmea2aAV4XbN9rcZpONrj9zRrbEJ2hoD2Knp3EmROak1pZJYlk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1446435110&Signature=iWZe0PjKgyfp8YcUST4Nq1drdtQJjMr11opaNpEor8npnnLTN5Fb~YL3mEf9cnWtW78cgBhN7kuZT2o3B1nEWGtcXsRcK49YYlVwruZolTenn8AQO~x1O30PQLQQTZ0rpbuk8WDc8SyMTq8eiNHhVzxeMiaA5mxVV79xMlHu~ok_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1444774836&Signature=bYBVjdNKbU~9yC3pUEr~Xo8znHI8PPfar7LnW-KA2se4y1A9N0pocUbMzgECl7Bk0UpudaGdlNfFGpr2j4KfuLLFkgAOz3YkFc~N2mr1abnybfx9jcN70Jf2r0a2bQYPk9v~MHz5qihgeoJTxU-WCSU7TBeb8kFRtqSwJtOUDL0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1436320290&Signature=DTeUf0qH~--tdid2d0s31094fZKyWt2lkaiwhDAMME8GQdqslPOmsD1A~etBGJcntPXUCbWB0IGR1fUQNZMA1OwxZkenIZzb1yhCsBbajcfNND1OeaTOHouWF~0~cezkwciw73tXl10pPCzrQXpiMQFGMfL0S8TMroGfCrutE2Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1476966120&Signature=PdgZD9BVIUi0Zz~x~y4Hk6zQwaO8nUpu204ydFki9ndzuR11Cui7BUyQhJLDCZ6eNU4yN8wP9IwfZl3kI9fRs1j2FZ8K3OcKrA1iKZZz1biQvu2pNiYT9hcIKVw6MG0ZGt7elCOIOrrvrZ1UsUHDGniAnUUhu38k9Ih0UObAQ5k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1473410787&Signature=DtwTSWhC2liXpE-D0wv3qgJ-0rqQhJOFGU~9NoMjESoKLKgB5hVHEs~FLkv~WAWnQoPYX5ai79DCzhy26LmtLRxUoUNUHdTRu90rM88V5WN3Kokyr8UyMFvfWQo-WDXibIhPgMS53YD~fIC30mi97JLll0WySP8YFK95uytpVnk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478479536&Signature=XkpiNrT77LuWMQCL0KkPQrXbhDincSerzGdgSmexr-ruzUPH~SFQ5cKo5-4B93UkoQYrDorxRCzYcvQygi1W4cnV4LrMnT3MzzSj7Fb9rYIab44UvGk6FmfkAh2ulduck5cc6Gb7WzdGYHehnYd7NbjCcGtwoLFhaBPw~zumfo4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478665857&Signature=IuuHd8MBIDCPnXFY6GfCf4v2PVPRmME5FoE6v5ZkJUK5O2cakSbujTzxyPuOg28npeWVqX7Mqcc5WiGuaj98JAt~GjPr7vRT1dDPei9MiXa~pVuY8d0TskFJSdJjhkCW09WhgjuRIAVYkke2GySFhnyDOlpikUuFL80Pw-tQiks_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1472008963&Signature=Tl-2hX9gegqW3Zbgp9BSeuW6q787psCOVPGhQvwgjg0PBHyNTS4LYVlo6-YCP7VTLng3iaWNrCUYyODlFv3nBWg~FIZhTbnlq4P-PWByk0aWBhyNADBL1DGQDrSPLYbhHPU9~gUyzlPYprm6AvSpvxFWH9uPSOyvT7sXDBh4elc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1475862388&Signature=Igw8XsWfLOIarDe4-mqFbj52Bya9jCVCjV-VZP7jqQWLq8m76RvY2aceIJuIwSPHxh34hjZ1fYJ10ax~K58r3CXp9pwe86Yh0x0TxKdJfGyA5gcy8v2srYlTuiriF0yTvL9CxyydnY5N9aId71K90xUPpnpTmJ-w7NG1WqTk0cU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1476303844&Signature=Ti-cg4E90rJs9AFY3NEoENSu9ZNHrUv2FMNSRxBb~eD-L5qxfmlJB4ttC29sIGpTbAJNuPmsAMFibB~hQaNAEe5r~n054SiEcCO6671TPRQGkXRq5Sq7EELfyU0TywX8pV85GJNC3WAzOTbd6Q-bpT~5isjTNMpu96aDUrvuBDY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1471329266&Signature=iubPFMPblUcbQ5RIywZdDvdnQQ3PjGcZS3kcSOgvg-kBbVSbrTGhV1jQNpSeX~xx4FVtkjoOs3bXL6mJ6Nmsr15j1Pw8V6XEBGkGeCH7lCiZ09a7NNgpmoYKCUg4eEAy7bZTPdbt5g5OdolzrQ7rNvgPxJ5L8KppBv8MQu-WgyQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1479870791&Signature=FapFrAE6WUuLvmKEIDrRREFubrje1e9U6UljbLljp~K8yzO~WQricJkEkNBpURfHh41GfB6J4GCc3Vf-f~Of7cflbedFT83FuETkd0EIIZcy5oSt70JPVJVuy55-Jq9cSRhlgIOFrnkFy2mGwMJufSKg0DWLTHNNvfJAkfikU6E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1477806342&Signature=WG9LFdcyqMHnTTVGEciYlXfILzlL7JYZuhdUjhEmHXhnin8d1crGNTgMCyqrzCS8RI732GXwg2utmOH6LuOsxfytGAnZK44zekBtvZTO8lPsAOIy25HkggR6Lh-wA6a9AtBC6Rla7F6pG8wLJ4O0aisaOXO92~hoUXoXO~dD54M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478419726&Signature=ZP2hPitEhgZyWVK4fT5shHtnbnIQwMkehUOXveSEm2hfUvoCRLHfHbSssM4sGipypz--~8mn26nbMM9fGyRqbn9zWI7vl8~tDGsFWfbPAmxW5CrT8QBQexIGv4ZsQwy1AUqIUHnQrONAXbf9l4cj5keYtukf6y7iN8kzYb8Kppc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

http://gsf-cf.softonic.com/dce/603/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_fr&type=PROGRAM&Expires=1478238495&Signature=b5W5MroNK6UcDErclzg12tvQFU-jzb25s3Og4iapV4vcm1wvW0H6EDam0UBNgNuEfjNYX4umO2T-xX7PIgmUNRt-nzkWX9rhoV-oB3yQVxAOE7DgRVQhPNCuknGWHCH9kvo1GZSHuxlX5Umbr6ucRZ5hoVCwz77exJKbMWqCWp0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordviewfr.exe

Latest 30 of 504 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.