Gridinsoft Logo
File Icon

The vuescan.exe (VueScan) File Analysis

Technical Analysis

File Name vuescan.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.211.174
Database Version 2025-03-23 15:00:57 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
15,499,248
File Size (bytes)
2025-03-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9e32765c22975aee85b9ca089df16462
SHA1
f165722a0142e0691eb80c9e9150d105fc9d7546
SHA256
08c0a880513186f5b4354ddaa83c2fafa26829e674d527a0ab3290dec23510d8
SHA512
75becba3bacb589bf45ee0ce0443e4efc64115c06264f50de8fac3d46168c451e64c34badfebdc51457ff5d79d38f3fd2711ec2ea4713bb4e2b39e22a39388f6
ImpHash
ea61bbe250ebbb867c450395b2bad0f2

PE Analysis

Basic Information

Icon
Hash: 92f8aada3afc7e3f4da55cf2b6f832f0
Fuzzy: 15556d112935b8de848321ca64ee2395
dHash: 7be3c28a349ce830
Image Base 0x140000000
Entry Point 0x14050d8b8
Compilation Time 2015-02-23 10:20:41
Checksum 0x00ed5d82 (Actual: 0x00ed5d82)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 14 libraries
Exports 0 functions
Resources 58 Resources
Sections 9 Sections

Version Information

CompanyName Hamrick Software
FileDescription VueScan
FileVersion 9.4.67
InternalName VueScan
LegalCopyright Copyright 2015 Hamrick Software
ProductName VueScan 9.4.67
ProductVersion 9.4.67
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 6,366,542 bytes 6,366,720 bytes 6.53 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ FBC9BAED5FAEC5421B3B0568F7E54468
.rdata 0x00614000 3,217,750 bytes 3,217,920 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3C7A646AC805EC598BD6842E866D696B
.data 0x00926000 44,954,000 bytes 476,160 bytes 4.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BC3E62D1597FCEAEF3CB55E94B651254
.pdata 0x03406000 284,640 bytes 284,672 bytes 6.54 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC8A138AD8396B72E7C4929C5AF59397
.tls 0x0344c000 25 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
text 0x0344d000 12,888 bytes 13,312 bytes 5.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE E701C8A04913A2001C019E09BDA45D25
data 0x03451000 33,200 bytes 33,280 bytes 6.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 258CC8F634CEDABE3CFAF5B9E5ED571A
.rsrc 0x0345a000 40,120 bytes 40,448 bytes 5.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7C5B2B4EF0A8B160A0F02C8688011B87
.reloc 0x03464000 290,140 bytes 290,304 bytes 3.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 90D499F0AA447750F71FA11C906BFBC7
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 58 (36,145 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 11 3,388 bytes
9.4%
RT_BITMAP 2 300 bytes
0.8%
RT_ICON 21 29,512 bytes
81.6%
RT_MENU 1 180 bytes
0.5%
RT_GROUP_CURSOR 11 220 bytes
0.6%
RT_GROUP_ICON 10 354 bytes
1%
RT_VERSION 1 656 bytes
1.8%
RT_MANIFEST 1 1,535 bytes
4.2%

Certificate Chain Analysis

Certificate Information
Product VueScan 9.4.67
Description VueScan
File Version 9.4.67
Signing Date 10:20 AM 02/23/2015 (3757 days ago)
Verification Status Signed
Signers Hamrick Software; VeriSign Class 3 Code Signing 2010 CA; VeriSign
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Internal Name VueScan
Copyright Copyright 2015 Hamrick Software
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Hamrick Software #3 Chain
Validity Period: 2013-04-01 00:00:00 → 2016-06-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 23 3F 0E C1 E1 2F 89 7C 28 D1 CA 01 32 51 74 4C

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware