home

wordweb5.exe

Antony Lewis

This is a setup program which is used to install the application. The file has been seen being downloaded from ec.ccm2.net.
Publisher:
Antony Lewis  (signed and verified)

MD5:
a007f7b923cd3639df8dee361af6b7e4

SHA-1:
0e4b0838b453061a3741e7717bc9fce3751c05d9

SHA-256:
009fa516ba63b35555647676c79bdd1ffd5ea56f12624c84062d6c64b733775d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:24:10 AM UTC  (today)

File size:
7.4 MB (7,774,520 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Antony Lewis

Authority:
GlobalSign nv-sa

Valid from:
1/24/2007 10:09:09 AM

Valid to:
1/24/2008 10:09:09 AM

Subject:
E=info@crossword-compiler.com, CN=Antony Lewis, C=GB

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
010000000001105394902B

File PE Metadata
Compilation timestamp:
1/20/2007 6:30:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:Gnnl2HlxP3nLyYyC/VCTbOhIV5ayr6z/UK3FTslEv//ecpkviEG+R+7APoyESzfQ:SnlSHP7yU/Vcb6Es/w6VOiEMvUrQWs

Entry address:
0x1000

Entry point:
E8, FF, 2A, 00, 00, 50, E8, F3, 30, 01, 00, 00, 00, 00, 00, 90, 55, 8B, EC, 53, 56, 57, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, D3, FF, 75, 14, 68, E1, 50, 41, 00, 6A, 00, 6A, 00, 8B, C6, 8B, CF, E8, 4E, 47, 00, 00, 81, EB, 10, 01, 00, 00, 74, 05, 4B, 74, 14, EB, 57, FF, 75, 14, 6A, 66, 56, E8, 4A, 33, 01, 00, B8, 01, 00, 00, 00, EB, 47, 66, 81, E7, FF, FF, 66, FF, CF, 74, 07, 66, FF, CF, 74, 23, EB, 30, 68, 80, 00, 00, 00, 68, A4, 69, 41, 00, 6A, 65, 56, E8, 90, 32, 01, 00, 6A, 01, 56, E8, 6A, 32, 01, 00...
 
[+]

Entropy:
7.9975  (probably packed)

Code size:
80 KB (81,920 bytes)

The file wordweb5.exe has been discovered within the following program.

WordWeb  by WordWeb Software
WordWeb is an international English dictionary and thesaurus program based on the WordNet database. The program is activated by holding down CTRL and right-clicking on a word in almost any program. This opens the WordWeb main window, with definitions and other help.
wordweb.info
5% remove it
 
Powered by Should I Remove It?

The file wordweb5.exe has been seen being distributed by the following URL.

http://ec.ccm2.net/ccm.net/download/.../wordweb5.exe

Scan wordweb5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.