Gridinsoft Logo

The word.exe File Analysis

Technical Analysis

File Name word.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-12 15:00:24 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
56,496
File Size (bytes)
2025-05-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4dd7ef8c8f78f54c14082ac09950ca81
SHA1
ccc7604ca18823f0e18e937e6a85f86adcf484cf
SHA256
6fcb4cdc997ad69f01721dccd851c8cddf13802c2f01e59d675ccc995569855b
SHA512
67b5c7091bf05b0c4bfdec7cb94c637d37b7d425180e0fe5ab175d620ae7795c94e08e3818c99094c89e674fa087f03a1def69bc13fe5994e1ea3e99d88d175a
ImpHash
cf87435b3fa02f7b1c82a55bba6a3251

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x004014e0
Compilation Time 2025-05-12 12:10:51
Checksum 0x00016c85 (Actual: 0x00016c85)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 2 libraries
KERNEL32, msvcrt
Exports 0 functions
Resources 0 Resources
Sections 15 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 8,472 bytes 8,704 bytes 5.88 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 96F43989074898020EB5B9DA477745FC
.data 0x00004000 208 bytes 512 bytes 0.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_16BYTES 57DA940C85A07F9A1AEB2DBE397413A2
.rdata 0x00005000 1,328 bytes 1,536 bytes 3.79 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_32BYTES 42A665DC3958B6246AD9A79FE87E94C4
.pdata 0x00006000 648 bytes 1,024 bytes 2.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 5A179F1E838B7B3276DE6D066B43F8EE
.xdata 0x00007000 524 bytes 1,024 bytes 2.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 52F97C67A0B739F233928450E757064A
.bss 0x00008000 2,432 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.idata 0x00009000 2,044 bytes 2,048 bytes 4.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES BE770D159FB354CA005F44955CBB1E8C
.CRT 0x0000a000 104 bytes 512 bytes 0.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_8BYTES 7F8D18683F8A98FB554A6EBDDF5F1D95
.tls 0x0000b000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_8BYTES BF619EAC0CDF3F68D496EA9344137E8B
/4 0x0000c000 80 bytes 512 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 0C4A8A56E44F221A902E2D8A1982BC05
/19 0x0000d000 7,944 bytes 8,192 bytes 5.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 7919CBD1A424C640EEE37A64B9EC8C1F
/31 0x0000f000 329 bytes 512 bytes 3.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 5D291F74219487BFFD06356D36F3A0E4
/45 0x00010000 546 bytes 1,024 bytes 3.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 1B32C2B1D4961C6AA4565539F14D9B10
/57 0x00011000 72 bytes 512 bytes 0.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_8BYTES 7E1D0CDABF85B5B7F1BF51AFC4DCADE2
/70 0x00012000 155 bytes 512 bytes 2.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_1BYTES 406B70665A5983D1F1682455C669F732

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware