WinWord.exe

Microsoft Office 2013

Microsoft Corporation

The WinWord executable is the primary user interface for Microsoft Word. The file is part of Microsoft Office 2013.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2013

Description:
Microsoft Word

Version:
15.0.4623.1000

MD5:
e52818239bfc4220555ffa15b2fce7e8

SHA-1:
670e502fc65fb70f546164e348d925c87e232d57

SHA-256:
8c31f0765dc7dc4835ee63b49b442794fa114e4d39614099b96cbb49a8901e4e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/7/2016 7:26:53 PM UTC  (today)

File size:
1.8 MB (1,924,768 bytes)

Product version:
15.0.4623.1000

Original file name:
WinWord.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\microsoft office\office15\winword.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/23/2014 2:39:00 AM

Valid to:
7/23/2015 2:39:00 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000CA6CD5321235C4E1550001000000CA

File PE Metadata
Compilation timestamp:
5/14/2014 6:20:47 AM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
3072:jyDVuTpOeyp0uTpOMckAKckAGDpA5NlKrss1ywKrss1ySZDvYONDzVFdC5wFVHHi:BF23FukA1kAb0rEbrESZU8wFjNHI0

Entry address:
0x1474

Entry point:
48, 83, EC, 28, E8, 73, FC, FF, FF, 48, 83, C4, 28, E9, C6, FD, FF, FF, 90, 90, 48, 83, EC, 28, 48, 8D, 0D, 0D, 07, 00, 00, FF, 15, BF, 0B, 00, 00, 33, C0, 48, 83, C4, 28, C3, 53, 48, 83, EC, 20, 48, 8B, D9, 48, 8B, 0D, A9, 1B, 00, 00, FF, 15, 7B, 0B, 00, 00, 48, 89, 44, 24, 38, 48, 83, F8, FF, 0F, 85, 4B, 02, 00, 00, 48, 8B, CB, FF, 15, 13, 0C, 00, 00, EB, 00, 48, 83, C4, 20, 5B, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90, 48, 83, EC, 28, E8, B7, FF, FF, FF, 48, F7, D8, 1B, C0, F7, D8, FF, C8, 48, 83...
 
[+]

Entropy:
3.7058

Code size:
4 KB (4,096 bytes)

Shell Open Command
Open type:
wordhtmlfile

Command:
"C:\Program Files\microsoft office\office15\winword.exe"