Gridinsoft Logo
File Icon

The WINWORD.EXE (Microsoft Word) File Analysis

Updated 3 months ago
Checked by Malware Check
WINWORD.EXE

Technical Analysis

File Name WINWORD.EXE
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.226.174
Database Version 2025-09-26 23:00:20 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,639,776
File Size (bytes)
2025-09-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
37aa50b592167061013d802e99f9c4b7
SHA1
fbf4dbb043273532f5ae994dba3ca9007b325756
SHA256
55bd20bf3bc8573acbae8de84de603022a40b2316bcd1ebfb1b6cd311773686d
SHA512
ecef40c8cd0bd155789594e2ae3569333e428c0a47ed94f21e96dc7b04d8cd117b130dce413ae54bb1221610917eb5f2bb779673c698ae491a6ec181a5898805
ImpHash
01c1fa6b7b1ef3853014170a206e5f32

PE Analysis

Basic Information

▼
Icon
Hash: d22181d2aba5e26188e85a41b13652a3
Fuzzy: 20252e75bce7470c992245b7771bb0cc
dHash: 88a0a5acae8e8198
Image Base 0x140000000
Entry Point 0x1400016a0
Compilation Time 2025-08-29 09:01:55
Checksum 0x0019d571 (Actual: 0x0019d571)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\dbs\el\omr\Target\x64\ship\postc2r\x-none\winword.pdb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Digital Signature OK
Imports 14 libraries
Exports 1 functions
Resources 242 Resources
Sections 8 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft Word
FileVersion 16.0.14334.20296
InternalName WinWord
LegalTrademarks1 Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2 Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename WinWord.exe
ProductName Microsoft Office
ProductVersion 16.0.14334.20296
Translation 0x0000 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 14,928 bytes 15,360 bytes 5.98 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F9700723F806DC47FC4AD373AD91185B
.rdata 0x00005000 9,367 bytes 9,728 bytes 4.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9F0C6731B3E54DB380D0B8D42F1104AC
.data 0x00008000 2,376 bytes 1,024 bytes 1.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4FF93E49FE7DF2A540DF099CE908CC35
.pdata 0x00009000 1,140 bytes 1,536 bytes 3.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 764B33A523602F0497F81AF2DB84D35A
.didat 0x0000a000 16 bytes 512 bytes 0.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 258A24BD0207EF72C4C1055521D4C4B8
.c2r 0x0000b000 356 bytes 512 bytes 1.95 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CB99DA55AB5C899F8BCF9042518B7507
.rsrc 0x0000c000 1,587,824 bytes 1,588,224 bytes 4.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3AA87A1FE50EF08013356D65B6E379F0
.reloc 0x00190000 120 bytes 512 bytes 1.54 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ FFA1AED74CE95C8011DC332AFBD32377

Resource Analysis

▼
Total Resources: 242 (1,575,798 bytes)
Resource Type Count Total Size Percentage
EDPENLIGHTENEDAPPINFOID 1 2 bytes
0%
EDPPERMISSIVEAPPINFOID 1 2 bytes
0%
RT_ICON 225 1,566,026 bytes
99.4%
RT_GROUP_ICON 13 3,228 bytes
0.2%
RT_VERSION 1 2,044 bytes
0.1%
RT_MANIFEST 1 4,496 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft Office
Description Microsoft Word
File Version 16.0.14334.20296
Original Name WinWord.exe
Signing Date 09:30 AM 08/29/2025 (133 days ago)
Verification Status Signed
Signers Microsoft Corporation; Microsoft Windows Code Signing PCA 2024; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name WinWord
Certificate Chain Summary
Microsoft Windows Code Signing PCA 2024 #1 Primary
Validity Period: 2024-08-08 21:36:23 → 2035-06-23 22:04:01
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 1C 48 9F 81 DF A1 B0 B7 77 00 00 00 00 00 1C
Microsoft Corporation #2 Chain
Validity Period: 2025-06-19 18:03:25 → 2026-06-18 18:03:25
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 C2 BC E1 E2 A9 78 3F 22 F0 00 00 00 00 00 C2
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2024-07-25 18:31:14 → 2025-10-22 18:31:14
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 FC 18 A0 AF CC 69 5A 87 3A 00 01 00 00 01 FC
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15
Microsoft Corporation #5 Chain
Validity Period: 2025-06-19 18:03:21 → 2026-06-18 18:03:21
Signature Algorithm: sha384RSA
Serial Number: 33 00 00 00 BF 93 DC C8 7E DA C0 30 48 00 00 00 00 00 BF
Microsoft Time-Stamp Service #6 Chain
Validity Period: 2024-07-25 18:30:59 → 2025-10-22 18:30:59
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 F4 17 46 85 C0 CB 3F 39 E5 00 01 00 00 01 F4

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware