File scan report
Verdict Safe
Is Win
This WinWord.exe carries a valid Microsoft Corporation signature, no engine out of 74 flagged it, and five sandbox runs showed no injection, persistence or malicious hosts.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This file can be treated as a legitimate Microsoft-signed executable. Keep your antivirus protection enabled and only run it if it came from a source you trust.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 70 flagged
- Flagged 0
- No detection 70
- No result 4
- Code signing Microsoft Corporation
- Test run Completed
- First seen 5y ago
Chapter 02
Why we think so
0 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 70 antivirus engines that checked it flagged this file. It has a valid signature from Microsoft Corporation, a publisher with 36 clean prior samples in our records.
No engine flagged the file, including 18 major antivirus engines that reported it clean. The Microsoft Corporation signature is valid, and the signer has 36 of 36 clean prior samples. Five sandbox runs showed only techniques common in legitimate software and no injected processes. The 12 contacted hosts we checked had no malicious or suspicious reputation. Five earlier Microsoft-signed files were all judged clean. The only rule was a low-severity direct-IP note, and those contacts are sandbox background traffic.
What We Detected
No antivirus engine flagged this Microsoft-signed executable, and our checks of external intelligence sources found no hits.Threat Behavior
Five sandbox runs showed no process injection, persistence, dropped files or malicious host contacts. The only network activity was background traffic from the analysis environment.What To Do Now
No action is needed. Keep your antivirus protection enabled as usual.Where this verdict could be wrong1 caveat
- The low-severity one of our behaviour rules noted a contact to 23.53.122.216, but that address is listed as sandbox background traffic and is not the sample's own activity.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Valid digital signature from Microsoft Corporation, a trusted publisher
- 36 of 36 earlier samples from this signer were clean
- None of the 70 antivirus engines that checked it flagged the file
- No malicious or suspicious hosts among the 12 contacted hosts we checked
- Five earlier Microsoft-signed files were judged clean
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 5 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 5isolated sandbox runs
- 8sandbox rule tags
- 1spawned processes
- 1network contact
- 2filesystem & mutex artifacts
Includes 8 mapped techniques and every process, file, registry and network entry.
Show the technical evidenceChapter 04
Technical details
None of the 70 antivirus engines that checked it flag it; signed by Microsoft Corporation.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 22, 2026, 12:41 AM UTC
- SHA-256
e25f32401fd3d25958b8b99f280f0325b232e54f185cc5d6e0710923005ac64a- SHA-1
36e718533b9530002143f69fd15b679208096aec- MD5
09b09dc651d921fe022b16c234e64a12
About this file
WinWord.exe says it is Microsoft Word (Microsoft Office), 1.6 MB.
- Claims to be
- Microsoft Word (Microsoft Office)From the file's own version information, written by whoever built it.
- Original name
- WinWord.exeMatches the shared file name.
- Type and size
- Win32 EXE · 1.6 MB
- Signer
- Microsoft CorporationValid code signature.
- First seen
- Jul 16, 2021On VirusTotal.
- Submitted by
- 39 distinct sources
- Packer
- None detected
- Entropy
- 4.11 of 8
First scanned
Includes every engine result (74), PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is WinWord.exe safe?
What is WinWord.exe?
How many antivirus engines detected WinWord.exe?
Is WinWord.exe digitally signed?
What is the SHA-256 hash of WinWord.exe?
Is it safe to run WinWord.exe?
How up to date is this analysis of WinWord.exe?
Community
Member reviews and reports for this exact file hash.