wordview_pt-br.exe

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Version:
12.0.6015.5000

MD5:
9f76121860397779bc34421307ead3ef

SHA-1:
878ef742dad2a9834c788e7dcc1ef45b591c89d4

SHA-256:
624d39ff0b3e16116b7102d97ff8d6d98966ee4d760990149a02d20269c1477f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 4:31:32 AM UTC  (today)

File size:
24.5 MB (25,727,144 bytes)

Product version:
12.0.6015.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\wordview_pt-br.exe

Digital Signature
Authority:
Microsoft Corporation

Valid from:
8/22/2007 9:23:13 PM

Valid to:
2/22/2009 9:33:13 PM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
3/29/2007 6:47:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
393216:XFH0DdJrEkrb0qxG48JyLnnLpwNri4uEVPvG92KZ/Neplt/o0+PnPe+IZT7:XF0Z5NH0q7XnpsL5P+IAloxx+u+IZT7

Entry address:
0x56569

Entry point:
E8, 22, 48, 00, 00, E9, 16, FE, FF, FF, 51, C7, 01, 90, B9, 00, 30, E8, A5, 48, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, F6, 04, 00, 00, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, E6, 48, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 8B, 44, 24, 04, A3, 74, 8A, 08, 30, C3, 55, 8D, AC, 24, 58, FD, FF, FF, 81, EC, 28, 03, 00, 00, A1, BC, 3F, 08, 30, 33, C5, 89, 85, A4, 02, 00, 00, 56, 89, 85, 88, 00, 00, 00, 89, 8D, 84, 00, 00...
 
[+]

Code size:
511 KB (523,264 bytes)

The file wordview_pt-br.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1442471298&Signature=Tmbd-qHntx-bXxB8azVd~TNHgHC-9oGDAfCGLv~NNDLvJ7mW0IaW5ULDu0ToIxUs0T46eOPL~Jb8j-P1AyDn-Haw0UhQV80eJ88naSXTbewa6b3brjW8e~LQGpLjMX8uq9YdsIhKLgWTp9ZB6pQCt-POM~0k4l9xOLZv8hAhiHg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1459581517&Signature=GYFo7I7b~EUguki8eCdfCyC6xGxp1FyE9USAQYWG5Gffr9R5PXiTFcaKXeaYDi4nIDItDkWfvKPeSAv2IfOgNlgv3fKfznewv4ax7uaAK8Kx9lVWK3lNk1L3dO0Sxijqs36tbHY0DXOC005OmJyNyjNDH2BhhIU3dKMN6mgyPt4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1458047221&Signature=VTlR2UshW-WAAOTck1gTGO1dbqsb5tsycI3-XcmE99rfFULxazRgsSYg9CiihkqAJZIA6de2Y3K~KECkAPULISKWYjjdE5TjO3xRYPJQznoJQEkN~NLUW-9A9ZQbY2YU5GkMC3D4uQcMaFxUPmOX8sYdO-jlerZUN~6n3WcsvYI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1475295213&Signature=SGLzujdIob9XpWw1s97j9679keDb8VbhWOT4nz-RFtTy~RTgs65AY6scrnPerTmD6v68AVip0FcZVgRKMA5zvoXkz2eTMuyjqf1KS2wC6xA04T7whd6ggHb4VOmZwfghTgQNDmC5xyQ6uYbWzUU4obFRW7J0KbtTX~aoX-aoaPA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1473118210&Signature=UZw3QT~PXurbF2PcNg-voWBqsmlWIi1C3NVPlueBvgW4~wLpj96whsSZZRCjPMzu91kbn4FaD5iw~ZKjUFSe8~tOpF4WQs6bGozR9jXyEC9AG547c0P5CrkTqhZdnf85EYDB1RpYdzugDn4PepeupzvgDP0-aLzVhaZY5PhhFzw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1458018932&Signature=TMWAn3ZczFjlU1VL0wPANVEzeH21cK74T8SnP1eIViVdtn9c-MeFRl13QDIUwa3ncoI9vg3~2~x5gtyO5qqdCHFsQYg7hKb6gd03iIFDyBLcr84fbGZM0OCI3i7ujiglnDCYPzWyEGjn5-tfLTFJ~~T8zK2cDQwjtoNXWHknkOU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1460882937&Signature=F4VbjXM5T~F9cDw542h6tdiTqZ~bP2Fi-gbU02oD0tiwTQS1i-pSQAQZ0VmZ8cCzHzVWF1Y7sjjvQIG4RcN~eQFW7D-jZ0e~vtECnD8B-kbGC5Q-Hr6-qT8plXzAKvRCCQ55LbJk~WEjx2fiFrULrZmBehfgPVyGdmrgT9HPlec_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1452645238&Signature=e7QlwPxrfY3eki3js3~Mqd-yh9NY8luKLddoxz3cbNr84cu5bYo8QK6mFiGc1h12lRCuXLCiMGwd8aK1ap2qiL8vLUgPKQ7yoxOKmClOZ7CVsKHLqKLEtPvO89hpZGMJ3AimrapuqQHmjD1xfhNJIUYggOK386hC4ggZokbnBtE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1468987600&Signature=XPIMVJUj2U87rDBwtu9Vu3EzO8nFQ-BgIncJW8u77pGI7t5pmR1~eLNEW9xewRt2aoTtmMQQVFHae65GlmMaB02e8ujsdvxEjeOOvAS26Jimy981P-JBpCFzAy-LtCahDyWr~mOKxmCi-Qfz9-w3zh4bhstcr8uk1sW6uFZaOdE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1442386639&Signature=EJ2Xq1WFEb5g2ALHKv6NdUpxUyyQGMCXaJf8QKwZe9BUTiewokTzAk98Hj2YiBZsYpHJ-cK-IxVcOWvxpZWmbmoSPkfgMknDF5WqWrP~I18SCQXlpJ43aDtqB9ZLvE4QCcStExcO3FG~iqsSdLQNcR6t0yYuD7Bmmm27ir8KWoI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://d.baixakifiles2.com/?ic_user_id=254&data=yfqbli2whxwvlwab32a3uqvl8aaspzlt1axmcmoaqycrh21nfr3qykx68efiykgb pvvxmpginrr4u0dgx2uju/ldvrvwb25/gdverafecrf8n/yg7a4cm5m/x9agekisxviuqef3miu8asuwtyyt7o/ tm5klou0tyi/f8uhkgu3sabf4vaeq8lgtrgrc p ygnnfg8tuy0btmsqamzf8fp2ilmybn n52fk4amgmfskd51brrq3f ggd3h4/6bkzggohln7bmsqpc1zgydplt0dav3ckqvn7f4ph 1foc2x7m0hs0mxfd2cw9x2w1q1otn lnlphpkbnq/hdj0rkgzledvw2q83tlyb/ypzlwkx/gvhked1zxbv60ngsrwwmluhgldk7t g8qwohivgz2sguqaw6ic34/04szo/qauoa70brysgqgktwa9dklcx8owvr60dwqmwg8dljjmeklumcrcj8nkmvilbigqt/syvluxwqh2e9dsbcle8vm9wed4pibiqysszjof8teuqfp dyxeq3kqnj1/nuwirzi1vh5q0k265jnx5urt1lb71rcwemvhnbt4szrghvuap0e 59llj/bgczsozfcyioljod0zryasctimiceatwvi/jwcsvx8d4ql djrevdckiwn7syxzylvrdsqw2x2bziiyjqy80peqyjtypu0ypbcv0xqzxjcfairlumilb3 0iezogayayxtyjvhhqbb7fbsrn ekbl xcs6dvo91kuvxcqk1smohml fgst 2mkb2okkblqhf7lnouihkmgkrfuo9d/2sw&key=q tokakxctdljlya6x83ojbmqsvbdkut4v3e7tnho95/.../pjyare08s5mgg6g6wdptdksxxuhnlj9idyqujy9epxzh

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1448406608&Signature=I8tsN9h5p2OsbXtcs6wzxZvgFdVGWaYRbsf2iJRT-n048tys6zg~-oNrw~cayoEQhy7h6HmL8u156QbP-~1KXbHSP4267HjsLuIsHfDV-yRlD7F0qIge5XcTG9ETQcEtiksWx8sgFv7zxqp1jJypP2DB4NrC3cht9xwYdCddaY4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1464931293&Signature=EwNUuLFFtf7sqYpfKS84kGAmvXOQk8BZR6go9liEShG~ya0OZFJFeMqhOwa66F~F~akiV0U6uQOKv1hgAAkAaUMmtmq~ohwwx6GVOit6A4yVXDVXZKe6XSCZkiUq1mC1SN2DvZmL-f0vsWgOzPVZzk4AM-5hPqRGgBlrFDpduc4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1444890192&Signature=OU29NLra1eflSh3mKcJObSwY0RBWg5eaGbjVflCtSzfAd~-RPLVlNjZxZ0z85~dsf3ag-XbCsLYAZ8PqESvdIiel6Qu4RSFvLfsSbbtLAQLkys6jmFs0usSdKGaC7r4byBc3uaNE78FBYoSbGKLP3ZKLT8fplY1qdTXYlfVbraE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1462965406&Signature=JD2RCd6bOQqLc-TY5t0tZAgiMLEJFzaFxxg44sew~VtI8-1SDP6eqXrsxQb9rmFz6xR0xLLpAEvCVmXVOY-fT1BBS0lLXVC0D52Gdrq8hIcqfg0IXARp1nbzchEcR~i3ipH5STyG2dQ1GRp7Rk1-0Sw5F4wrJ21TnVxvUJub80I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://d.downloadfilesreporsitory.com/c?x=FVmbC1GrnIjUeYr3GHYkqh wrqjQUUTvU6C55PmMbic=&c=nuZUZ16LP2eBBxkwyShZFICF47YFx73dS5JLmFs9WYCXABO6wetqfnuPhJM2bFa6VI85z7gi6X9NDj7NQwYwNg==&fallback_url=http://download.microsoft.com/download/8/8/1/.../wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1476755255&Signature=ggrGXMsxv5jW32xiLcRngskxtxxcMI80fF6qdGe5KuXyFLJoFfyfcdNVNBbZoq8YPJw91SEAJKwgOjcXCQNefVPYIKMZaSNmzafuyTt03paFhEumUQqYkd-Y2TYkk9yAXGwpwKwVsyHQR0UNrE8A8qzcLLJ0j7quhlUyQxsLN94_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1460198564&Signature=Es-TP4bInAT5VQ1affEcAGIf2h~C3B9XFPNhYy8QGxxFKgvmNsvOlN-4y-iFVy5vzJwSmN31jNht7fxxdvrCcB6LcJuKoAG2MuF-q0MJLyyWavP2ztV219g7LNOP6ypf71CiBW58rg6o1fbl1gejSrSFrp0qfQxZPD34ZPpyEGE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1476221226&Signature=hzLdc8LrGMcIbY9GIEh1d6aja~xb-NvkF8DTjsP1kcKJ3aOSVVvPH8MBA6k0uaIs2nY5oItSX5fhaUEhm191nNhrq9lpBHPhgFLuHUZuIOx1GfaPbE5isnJ8aJbWz0zyJxkw6alZhpAH4qySA1CJJEHSth7KET66rRTKdNyB3m4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1475894749&Signature=BQEx~xNBX6YGtbW2BqIO49JBz~sYvk0pFxxjtjhg~Lg0iv9VLRShX6QAC4LXaiSK4WuRsJqsdaZyHk-FOCWArFTZn2y5U4leQkwKP5iYLGGwBJQA07DLSw~H~WTnhN5J0AsIScPOd-n5KtmByWHMyrNzKHbI8xZ1uoZMXwDqaok_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1449693156&Signature=Pj8pdKAsceQCnLS65bOX6a0tz8rTK2tQNWrF7vEsYRs9wiiRsgKQUW5TfYV0VLSVoOuGtELzM8cGdto7LWFy6fnaGIutcCeJVxm3kp4uHAKHr9VrEXQcxau0sszhDBkSk8Q-14ARrOA8TadXntW0fDIL9stWcaCLqMi6RXY2mr4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

https://doc-0s-ag-docs.googleusercontent.com/docs/securesc/thogbfekhark8ppa16pl4ek46bfkrjpa/rice7in43h42c3rb3knha6dehgai187k/1469664000000/.../12139754170926394935/0B42qexFRY_i2OGozVlBtWlItLTg?h=02543078082903070120&e=download

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1470553921&Signature=apikVpCd5u9DXae3JfkmgSoyI1Ty~MbFh3PRxu57TWU~vmUi4N6q8NqDal96p6CXp2WD4kHFyBkNMxzXoTVPaVUuAvbHtKNxOtaoYp9zsQEAsjRaXh4qKCZutUfXV2guKvICctrc5~iAX3DRUpRzlKWb0w3APHOHbKEi2uCCpC4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1478477754&Signature=FG4aqTO07KAyjamP540B6tctMpHXVLpFYt-vQNgTYqZrS8NQin18~YUvEmPXkx~mBxy-hmmpfaSiG9XC4Q67huMfJdH94WxPKsr8iy7ax0FDlNIkrLswJKBtpo5l7gF6lHDnFKLIrScxxL-jKL5E-DEuomSILyKsP6hGx-2vmZ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1469288789&Signature=Bfq0IR4u-SAGYwrPsBZqFoItwIVfY4OW7nlvCkra0en1lbhfqpPh0FVYW1ZEJsNRxOzDXydyY6OHNZvNmqeuOoIp7cHizLWEM1hu~nChnDdrArLyXdpZTApH3x6N~rLelDkJN6m4Hi4Mn6TpPPuxoY2I4XHIGL7e83XDGZtii3M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1479363558&Signature=XjYiEOOqIWsfpYfkOjbARGwd1gMKQF62zdfWzf7oHze2mNO70i2SjguYas2IfU-LzvxzpIldE1rv9hmWdmUPsNJ68h39~bDyZMW4v28ZlcOrWjAS3lqPtDLzey-C8xf1vnK3W3Qklcc-ooEfwdSWMl33pQlmqDRYAAJJu0-BiUU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1466303148&Signature=YDzrojkyHt9Cz~~0Ij4d5LH15ulzhouNveqtizD1VT~VUM6bJYAF~PNKXi-jRkBifQ7sPhgrtreVP2suw1ZEi6lfHfE7tCXqW7y9NNi~rvzj06QX5h6NZ0uzFdlKO97M0nfHaJOqfsODkqSZ4vZBASPx~7sA4b05j7BKaNwms8Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1476090591&Signature=GBHzXXS3Bw1dh1e-cHu3eoQFJ2XSlBiMJd23lXo7aHbrStfxocwdN4mtDz~Hr4CcBmqhw8GA58eEo5FDk7rUBkToA-7dj3GPelIwvc1qBN1NvXMFoG5TNUoqtowCdqX-zfRA7XwLV2VZrv1TsvN2vu81tSamaC2UzIHJ7wlR9sU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1475476989&Signature=Ehn9RpfzrIFAKmewKKkT5LV9rfs7nypElvi3o4vHS-5j75KtHxzOdIvUWiR6otN~V7FGzVqdsB~dTBGoh3VnBbbZ5A8lno2xiRHef2mnEVrTJ1nl1XDYObw7p8cJ3~efsuADDTaEH-xHTbuc7LoaOdqZu7hODivnEklXpNVyLlI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

http://gsf-cf.softonic.com/878/ef7/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34385&instance=softonic_br&type=PROGRAM&Expires=1476279431&Signature=cvl~X6hhzY7FHPUp~9IEA3shTQzZYldWJHVAS5sk-c5jcZN-4NpKqGQUULaPhWeHAIi2DwzErXEGPXRAeuii8rr~4sAKPtGBlerkdS70TjhuixMreimiCw3cbGA7lg8sl9N3UGd-UCV5hz-CzAaZahxoZSP3ely~dzvpQ01lpms_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wordview_pt-br.exe

Latest 30 of 400 download URLs