Gridinsoft Logo
File Icon

The wps_office_inst.exe (WPS Office Setup) File Analysis

Updated 1 year ago
Checked by Malware Check
wps_office_inst.exe

Technical Analysis

File Name wps_office_inst.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.179.174
Database Version 2024-06-15 17:00:20 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
5,749,136
File Size (bytes)
2024-06-15
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
374f077b74762d300c35b62947d9738e
SHA1
316f2577ac4e911543fc6fc1279034952d5f0f84
SHA256
45ee781e271d0483d777a55544ccd44a9490ad26f533dc89816c068adb61ccb6
SHA512
dc580db7a7d2cf4c4d3b24e5375762048d6feddd00f3201b7f2236634b6c5d909f6833056a82a318b15876a28de2aafa22e8e0d99c2960d1a3e15a02972dc60b
ImpHash
b58c27ae840da00c8885e7dd1f6265f8

PE Analysis

Basic Information

▼
Icon
Hash: 5316f6d2f33cf51fbc7cae985eb6899b
Fuzzy: 3de6f91d22d39c03dbc69425870a7c37
dHash: d8ccb2aa8e9694c4
Image Base 0x00400000
Entry Point 0x0066e6d7
Compilation Time 2024-05-30 06:07:28
Checksum 0x00584c77 (Actual: 0x00584c77)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path H:\rc_bugfix_v12_i18n_202405_branch\Build\Release\WPSOffice\office6\addons\konlinesetup_xa\konlinesetup_xa.pdb
Digital Signature OK
Imports 1 libraries
KERNEL32
Exports 82 functions
Resources 13 Resources
Sections 5 Sections

Version Information

▼
CompanyName Zhuhai Kingsoft Office Software Co.,Ltd
FileDescription WPS Office Setup
FileVersion 12,2,0,17117
InternalName konlinesetup_xa
LegalCopyright Copyright©2024 Kingsoft Corporation. All rights reserved.
OriginalFilename konlinesetup_xa.exe
ProductName WPS Office
ProductVersion 12,2,0,17117
MIMEType
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,083,706 bytes 4,083,712 bytes 6.73 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 904839B81FD31E5E7E882E367624A3F3
.rdata 0x003e6000 839,092 bytes 839,168 bytes 5.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A293679E9982F0806AA20939C25B7FE5
.data 0x004b3000 89,876 bytes 59,392 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7BB90C0F8C73C3BCFFF3FAF9CAC33284
.rsrc 0x004c9000 571,604 bytes 571,904 bytes 7.54 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 13236F62AC83A390CC296E48927C0291
.reloc 0x00555000 172,748 bytes 173,056 bytes 6.61 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0E5692E53BC53F47FCFAFC164D95F283
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 13 (570,797 bytes)
Resource Type Count Total Size Percentage
ZIPRES 1 400,165 bytes
70.1%
RT_ICON 8 167,594 bytes
29.4%
RT_STRING 1 64 bytes
0%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 908 bytes
0.2%
RT_MANIFEST 1 1,948 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
Product WPS Office
Description WPS Office Setup
File Version 12,2,0,17117
Original Name konlinesetup_xa.exe
Signing Date 02:53 AM 06/03/2024 (429 days ago)
Verification Status Signed
Signers Zhuhai Kingsoft Office Software Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2023; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name konlinesetup_xa
Copyright Copyright©2024 Kingsoft Corporation. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2023 #4 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
Zhuhai Kingsoft Office Software Co., Ltd. #5 Chain
Validity Period: 2021-10-14 00:00:00 → 2024-10-16 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 A8 1D 3B 96 27 0D 9A 1D EB 07 CD 88 67 D0 A9

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware