home

wordweb6.exe

WordWeb Software

This is a setup program which is used to install the application. This is installed with WordWeb. The file has been seen being downloaded from drive.google.com and multiple other hosts.
Publisher:
WordWeb Software  (signed and verified)

MD5:
73a0db047b394b9b6ec848915054714e

SHA-1:
397928eaaf05ff7b20a731a5c8c63270a98efe73

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:30:20 AM UTC  (today)

File size:
18.6 MB (19,510,960 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
WordWeb Software

Authority:
The USERTRUST Network

Valid from:
2/21/2011 7:00:00 PM

Valid to:
2/21/2014 6:59:59 PM

Subject:
CN=WordWeb Software, O=WordWeb Software, STREET=10 Southdown Avenue, L=Brighton, S=Brighton, PostalCode=BN1 6EG, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
427859AEB362FAA9CAA9324FE90F1737

File PE Metadata
Compilation timestamp:
10/13/2011 4:07:21 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:oguWY/W0wOhz7yIOCSOP/v8DDtaFLAqX4nGsfzmkZ9al:oqY+0LhyIX/0DDta1A3nGKSM0

Entry address:
0xB3D6

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, 70, 2D, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, A3, A1, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, CC, A6, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 40, 32, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 32, 41, 00, 8D, 45, E4...
 
[+]

Entropy:
7.9987  (probably packed)

Code size:
70.5 KB (72,192 bytes)

The file wordweb6.exe has been discovered within the following program.

WordWeb  by WordWeb Software
WordWeb is an international English dictionary and thesaurus program based on the WordNet database. The program is activated by holding down CTRL and right-clicking on a word in almost any program. This opens the WordWeb main window, with definitions and other help.
wordweb.info
5% remove it
 
Powered by Should I Remove It?

The file wordweb6.exe has been seen being distributed by the following 5 URLs.

https://drive.google.com/uc?id=0B5HI5uTeYfmJTnJxQ2F5TkZuREU&export=download

https://doc-04-18-docs.googleusercontent.com/docs/securesc/4q6bglb4svucn44k61iqkhmh376op46c/b8deta9rsk64pl36o95sgit2umuka2tg/1445313600000/17760745658495276757/.../0B5HI5uTeYfmJTnJxQ2F5TkZuREU?e=download

https://doc-0g-ac-docs.googleusercontent.com/docs/securesc/nqauccmlg06h44imjgqounp16lr4uoci/r57tni670gl460gj8ul6jdmdsku807a3/1443196800000/18278936409334112871/.../0B7sWQEWGG8KVWEVlQlR0dGFabFU?e=download

http://software-files-a.cnet.com/s/software/12/41/37/.../wordweb6.exe

http://us.wordwebsoftware.com/.../wordweb6.exe

Scan wordweb6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.