Gridinsoft Logo
File Icon

The wps_office_inst.exe (WPS Office Setup) File Analysis

Updated 2 months ago
Checked by Malaware Check
wps_office_inst.exe

Technical Analysis

File Name wps_office_inst.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-03-31 02:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
5,605,248
File Size (bytes)
2025-03-31
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2f18868439d57e0f6cf6788b30147933
SHA1
25fbca095e1de6bf5f0ec44f07cc743cf769817f
SHA256
8a5ee2bf5cb0375822613d5366442220003a0a38bea4f69b935274bc3c666d11
SHA512
1384d8a08a320a7fd60437ef18915e2ff3649f0717549f3c62b2a9acc2bdaf8fed38ea1ede2bcfb13d5751076e94ed8f984727558837e423e3cac1d67c75f0ce
ImpHash
72cd1550049c30814d5a25a9fd9f80d1

PE Analysis

Basic Information

▼
Icon
Hash: 5316f6d2f33cf51fbc7cae985eb6899b
Fuzzy: 3de6f91d22d39c03dbc69425870a7c37
dHash: d8ccb2aa8e9694c4
Image Base 0x00400000
Entry Point 0x0067cb02
Compilation Time 2025-03-06 10:54:04
Checksum 0x00560f1f (Actual: 0x00560f1f)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path H:\rc_v12_i18n_202411_branch\Build\Release\WPSOffice\office6\addons\konlinesetup_xa\konlinesetup_xa.pdb
Digital Signature OK
Imports 1 libraries
KERNEL32
Exports 0 functions
Resources 14 Resources
Sections 5 Sections

Version Information

▼
CompanyName Zhuhai Kingsoft Office Software Co.,Ltd
FileDescription WPS Office Setup
FileVersion 12,9,0,19241
InternalName konlinesetup_xa
LegalCopyright Copyright©2024 Kingsoft Corporation. All rights reserved.
OriginalFilename konlinesetup_xa.exe
ProductName WPS Office
ProductVersion 12,9,0,19241
MIMEType
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,117,430 bytes 4,117,504 bytes 6.72 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 49847D19FAD0AFD321A0A8B6A1F1F50C
.rdata 0x003ef000 839,110 bytes 839,168 bytes 5.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BC5D424707EC4CEBB0F70C4FC7B20576
.data 0x004bc000 86,900 bytes 57,344 bytes 4.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 19B6113A4AEA065FD3197C1C38B0D55B
.rsrc 0x004d2000 397,348 bytes 397,824 bytes 7.20 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A5E4CDF78DF4E8462AF9E8E3E52C3033
.reloc 0x00534000 171,132 bytes 171,520 bytes 6.61 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 16C769F1281DAA8D3347EE7FCCA6166F
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 14 (396,494 bytes)
Resource Type Count Total Size Percentage
ZIPRES 2 225,806 bytes
57%
RT_ICON 8 167,594 bytes
42.3%
RT_STRING 1 120 bytes
0%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 908 bytes
0.2%
RT_MANIFEST 1 1,948 bytes
0.5%

Certificate Chain Analysis

▼
Certificate Information
Product WPS Office
Description WPS Office Setup
File Version 12,9,0,19241
Original Name konlinesetup_xa.exe
Signing Date 11:43 AM 03/06/2025 (93 days ago)
Verification Status Signed
Signers Zhuhai Kingsoft Office Software Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name konlinesetup_xa
Copyright Copyright©2024 Kingsoft Corporation. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2024 #4 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
Zhuhai Kingsoft Office Software Co., Ltd. #5 Chain
Validity Period: 2024-10-18 00:00:00 → 2027-10-17 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F 52 F2 95 33 EE BA D4 11 50 36 79 4E E1 07 4F

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware