home

wordview_de-de.exe

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Microsoft Office Word Viewer 2003. The file has been seen being downloaded from www.netzwelt.de and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.6015.5000

MD5:
f404a2c2072fe6a58c595f0a4ae54296

SHA-1:
679d2c80bb33ca262b9cf55626ce36e23fd67293

SHA-256:
0ef3d84e783e83ab78276b7c356e47c991a3670ddfbc9b3ced9660d70b8f4dfe

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 7:28:34 AM UTC  (today)

File size:
24.6 MB (25,755,856 bytes)

Product version:
12.0.6015.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\wordview_de-de.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 2:23:13 AM

Valid to:
2/23/2009 1:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
3/29/2007 11:47:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:okA3eEcQhc4zhqXSrT6gI/HNBi5LrK/aePzN0NLPa2210qGBLrt8eQJd9:o7e5STsXSqBi5LGPh2M0qGBXtQ9

Entry address:
0x56569

Entry point:
E8, 22, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 90, B9, 00, 30, E8, A5, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, E6, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
511 KB (523,264 bytes)

The file wordview_de-de.exe has been discovered within the following program.

Microsoft Office Word Viewer 2003  by Microsoft Corporation
Publisher's description - “View, print and copy Word documents, even if you don't have Word installed. This download is a replacement for Word Viewer 2003 and all previous Word Viewer versions.”
www.microsoft.com/en-us/download/details.aspx?id=4
7% remove it
 
Powered by Should I Remove It?

The file wordview_de-de.exe has been seen being distributed by the following 50 URLs.

http://www.netzwelt.de/.../4370_2-word-viewer.html?sig=a099b44262a5c6bca583bb33443510ac

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1471747570&Signature=heHUSC1Fkujj-47AoAoeOuSPAtmcLn2fP5WJL9PPS9bZg8WjOZeivQFDJU6MiFDfF28olkQV7ifvVjJW-aVjACd5994wutuwUvH2JCvM6HgE2qKCtQqtSbOkLH3MpK3N1sCZ3KhzSKNvfr4Mp91O44JkaUwsA626XNqWQjT1pfc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1479068254&Signature=EVQ9aSZKbLi-Mqyu22UFQLVbzTfhaadB3FKLGgXW1CudycvGoi22cOC~rmnmnLyuBF5Qa~YcIrGD0z2rnL7e7oBC90410b6rFqVUjUiYEOy4z4K5mc59VRM5YMf3aPso7LUx5t~u9PBrBHAVR4uxwzDXaIsWh5dzoun91CiVzA0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1441942585&Signature=bFninduxvAsO6agNrEdm6S6kc024lOO9ji1wz32DdWnJ5MhiUVfocUcppmt1wozy10KrGQ~VLUPBCsByfChBWAoi1HPZ122L4yohh-wA3d~AsmYloPwGklRCAqBBsZTMXgkg6u8KadsRV4gh9v7TEnO5OdNuGTJEdsSfW12gNK4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://d.computerbild.de/downloads/.../wordview_de-de.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1463881677&Signature=S4HxRRNhzacG9q6G3TXM4loM456Y~7IWjQxlu93hBcFrv8SsgBWDKjCzcZ8cHeKWh7DfKHnGuILK6INxzx9UnBGwAJ7PpwIAgYYosIdKKvfT51cQzu16JPM01Cw7zx8eLTKcsUgJPZNyf3i8jSkukoTPDFA3deSO0yp2fm5QyRI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1478560049&Signature=BDCubbW4MPSjPPJo1HfKaR3huYUekq~Lyw1VeBRCYvSqCgkQXFOtXrOj2byqlf06uIv~8DfLTVh2jEOMUVdztbR8tRRfDl40Bzw6IP~GpThggNX5NXZzX12Wlw00GNSP-0JHbhdaRIqfuexA9m4vW~afxEA5CIsCqqhpWFqNvdU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1431409732&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=irCQ9hovI52P~Uj7TePEVa2AIHfoq5ku2lO8pN~SMPl3YJXfihi8-cSFK4A2X9mw7-Ce8hHYYRCXi~c7zc4ws3l87qZ1iPk3IsMEsDBxyTbpe3PHr6gSfoBt67sgLv8E5L4mgA6N6pSAPc7VPHR49wgYhZmVUzIN5TrOQScldSg_&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1475713512&Signature=g98Nm4bpX~GZuhNZCqEjrlS1u5vqhSnVDiMsTO6V8J9cmsnp1sS~fPvdKgrG7M66s-tRKN-BNdmK6cO8GXvdLo5aho~jbgCgWtnua1~QFy~0JGkRYNS6pflzX3i4~hTK7JQSIAlhzPd8mEFZ7dpnkzIYZFrWlLr-dAC~eZc4-R0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1448947604&Signature=L9M3QWuxpTtWzcYpu3E7Q2GgOqmba-z8IDZY2KKQRXSzFnrHlO7lkRmG7uR7fWiw7ECblXbsrRsmEUmf7EFG1Nde5fzuR34GBHT-8LS0J8juYUHOwBv7SMfhsq2n3SddjOchHftWAT1RIiBpl67sZH3yTT2-ZvOPPctPhcxCAvc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1457961433&Signature=fgy63PbVxpdO0p5Ag8UwjwXFy8mTYfWK8cE5Qdt4XXewZxBPScE3bJpdzT65Fn2efM1RuYYlF1KxA8WpGi72QpE53DfVjF40~rfaQic7pJArfytT1g5vnhGbrN~IgvB66FZi0fMW2hZsbWl8vsuF3eI2NZCSrh73jzRB9o~vxJk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1479758164&Signature=U-jeUgWbg-cEsWK7VZOCiIPNUF8smcK~4wZG-bcuqa6DgKn~L4CQCeEiKbsG9TWxUdobKM-AgjJOATnsKuGaW-wO35lBEfx8YVB7R2woRvGAgXYjkH-lEC~~uH3LptuN7CS8rknziWw7PKMMQQrMP-BrGfzwn0qi7~8LC2owTy4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1444518018&Signature=YoXEf~CQyqdAwaphSCqlKd~Q4kueda26jWaMucOlUxBK3bqFfyUlg6oAdR0NyMfS8H62RU26yefjOafrRz0MMcS1zcIxtcqG8tcxscmXQ5~TVSONMA3FYIlyItfnRtpUZf7qfLwe1BpwHrMaOsM0BQsatVd83dweKTSTFzY4bu0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1474169223&Signature=IDgUCBJpeVCXGaOs~-zpI1Nmibf3FCgkP4HU86V08onkERaPBxR3b1W~zcd3RGx0kjo8DqXfl~cSZe4fWy67JcK7O54d0pt2HMElAEM7oejBLpe5ipFaOAMU6vmmrQjrnLrPo5OFQavCHLnb548jfj0v1gM-Vb-IK8O3sfuc~L8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1446431480&Signature=XMXjl5jq6NPf-CmzEQcapq8FVy-pLR~kpAbcJYVj1knRHuQmIEcEq2i9zmClwyqYZ1eekaXLAVuL6nbLugIhJh7GZu45GYs7MNJjMALvYkfXRXAr10SniTIRSayBNSvK27yvbvQLYaen6BDjiBC3W4pbQf44G~gmTv1bi2YVByU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1473729406&Signature=Iq9I6p9KUeOkCgrejgRZMXAjS71g~OBNlvuMl5T3MRLxZ5Ut574s6CeJhI8OvXJuVxu802veL5NekNhpjlEkzn3KB1eaJKUNflJK8cyoCYTHUPF8pzUsfKPBpBt-7wRSMIC5yL9yjm~zNHlpn2ny83aU1CzJnUHC-HtpMhF1xxI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1439937310&Signature=eCvogyMZB8~~BAab3o5FZEn6YA~B5qk3X8SaEeqRkm8hqhCzNNns8IMZtmnIgCOk6a-G8yYPA~eZt76IC6rBAalbFxj1~m0iu-4W9-EzgnCqwMNW9yX4sdQ1EGeN1EjXUoabrOaYoMU2Qw-sv9iuRHnvfI4AQEzJKdRLQv2Eoak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1475113551&Signature=VQuSR1rm0n6TUizF-77~pwhTCrXoFTynyLxCfUr9A5tsCoJalWOVNBovxHIzisdXfixxmFs~5xB5HpzM4tRFejp8iYYtYW-JCkHFV3BDe3odyBoCBHePH5aqW5NRtwV3b65ut9ALGbCIwvYl6tOkI8eK3eQzz7Ezub4JKxfBvro_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1473377607&Signature=KpJSdyBgjlJkdNfNQVJsOpersqHNeJNV7~gSUZZvzDnheT3QgdiFLILYIDugF-OpKjYGtDmuOYsOBAPkMnGTKaLhpByUGIeZDPSPlT4CFkYwG5pakQd4Zf3tQ1ZPs2LrsytXrCF1HSIhVLj2ZgQFtTvxJbJj~KdQzkj1x-1-HJU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1433566586&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=iPY~AKRrQndT1pGYO3qT2UFEu5-Ik6PRFnnNNdb5E89mWvHXY5-aZlB12EKbtiuTDS4pwxbqjpR7GrmrbJRomXdbkWrz3-odsY1Rra8gYx~8pgs3YHzhsO9TVv40VwiD8388DDgE-EItU2pl36EvyNpRB8qVwdsw1W9QAvvTo4Q_&filename=wordview_de-de_11-8350-8341.exe

http://www.netzwelt.de/.../4370_2-word-viewer.html?sig=9e44160c08774b6b796f25fd043adab3

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1449131208&Signature=JJ-lQhMk~GKmKqOEN~U9XKaArCfOjX7q9U6rg0kPdH4rjdMc3kdnDOT4XRkm3wy8ObZS6SXlSHwpZX6M5dPpStcJPMM67bjRGwneMqarIO8DGNNnP6zNcDUKuzNWDgGUbViv5J66TyoC6FKjgharBf8uTP~j4P~oUOeXOFE-P4Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1471062415&Signature=ejRMDpGn218DGCvFCCFncmBQYuAYZwo~-Hq~FyuU-oznF4JL24hshCyzROMA8R8GLfnHgHTxpiXW1HkL6qhxMT9yDFqK6ADGLljbV2FiKjpEEJ6xEk1VGs-RZq9DuK~gKB7GfOt6C18-APMDaYaptB-J2yLuduB1ADegAr-~egw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://global-shared-files-l3.softonic.com/679/d2c/.../file?nvb=20150118163041&nva=20150119043141&token=071216f9aa6594bd9a9e2&SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1462776958&Signature=WYAxzArsygSrG3vxoVSX9KD4HEsJz5e9zSCfe8omhGfgYiGLrfqPhz~6VvGSzw2EueGliGiSU3QPGy8IkE4kSAN9JAFz1404sDeRz7NMYV5~zngRbsD2Z28FS2DdISP81lSb50YAr3Krhlw8r3y2hWEBDzMiW1cM~lftqm-hW70_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1463443565&Signature=OAC2OWMH1EkJqCPN~eQvJzy9-7fOS~axuSyw3y7KoK-c6anA5GhUVDOdg8kuuv-poExuVSP5KC1qjqxa4KDRi5fLr6m67k~pObaExMEcxzkf6CyM0ZcL-zjVm4tX5e7M2ZZ7wNSn7M71jWFRfDu3ESjtNsfmWrweQEB4bwf4JaQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1446513029&Signature=WZ9NnLCe7xdgErRnzfxg0AkKGKdFd7PF6R9gzuG3Dxn2NovtGCIBz2hbD2RWPAfkBtdx1L7zaxy-ankoK4vs8-iFZ8cE3Ek1Y0jAyRTGknSKVnLLDXvr-vgfOwxXR6ETI8TaipeXBaTo1T~ifrDeEj-14p4PaFHZIsua4VAEJrI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

https://secure.giga-downloads.de/dl/.../

http://gsf-cf.softonic.com/679/d2c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_de&type=PROGRAM&Expires=1459915873&Signature=GSySp4SY28QwLoHPGa55mpcPi7UbZLNeaHGo0Zr3H17nuLxXPKyi0a5sTptZdTAX9wWJP~vxvfTqs2~-ikoRBBzJBn~7xYMhjZDWfExfUf47l5K4iPySWGvVUU0Ho4xo2hPWZ8sAsajR2NJmdby083zjH47mDbONKp75rZFVArY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_de-de_11-8350-8341.exe

http://www.netzwelt.de/.../4370_2-word-viewer.html?sig=ee7ba51964a095c24980757b169150d3

Latest 30 of 50 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.