File Name | VBAxWPS.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
Scanner Version | 1.0.216.174 |
Database Version | 2025-05-21 12:00:29 UTC |
No threats detected by our scanner
Hash Type | Value | Action |
---|---|---|
MD5 |
327b28fdf771a5c5d4aade543a9e4442
|
|
SHA1 |
ca56888cfeb68bd7e6394a31472e916ef86276b8
|
|
SHA256 |
51fd8e8d84fac2b192becff116170299ffeae2c1887421841e6f90c7192e63cb
|
|
SHA512 |
767bc7b0fa3859b7c6b9380d65b0865c7b9c9130de736c71e3489273096158fe882baf96917f009dc3f095ad3538e4d6c917538d722be0203307ffd8a2b8bc3e
|
|
ImpHash |
7fa974366048f9c551ef45714595665e
|
Icon |
Hash: 92e6b6552794891b803e0d3ca696688d
Fuzzy: 2f22f32442dec24671266e1b1e8cf16e dHash: 70e0e8d0d8d8c8f8 |
Image Base | 0x00400000 |
Entry Point | 0x004030fa |
Compilation Time | 2009-06-06 21:41:59 |
Checksum | 0x00000000 (Actual: 0x00863ea8) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
Digital Signature | No valid SignedData structure was found. |
Imports |
8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION |
Exports | 0 functions |
Resources | 15 Resources |
Sections | 5 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
23,628 bytes | 24,064 bytes | 6.44 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
856B32EB77DFD6FB67F21D6543272DA5 |
.rdata |
0x00007000 |
4,764 bytes | 5,120 bytes | 5.05 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
DC77F8A1E6985A4361C55642680DDB4F |
.data |
0x00009000 |
154,712 bytes | 1,024 bytes | 4.80 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
7922D4CE117D7D5B3AC2CFFE4B0B5E4F |
.ndata |
0x0002f000 |
36,864 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00038000 |
27,760 bytes | 28,160 bytes | 5.17 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F8684FE4971783F2140C642CF13D7FBA |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 9 | 25,064 bytes | |
RT_DIALOG | 4 | 1,180 bytes | |
RT_GROUP_ICON | 1 | 132 bytes | |
RT_MANIFEST | 1 | 533 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important