| File Name | bs_wyzs.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-14 16:00:28 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
948f09e2a09142e97e00f26b112cf251
|
|
| SHA1 |
b0fa5631bc51035df9b38247100b3fe800a8f871
|
|
| SHA256 |
ba1a550d6ff9c5350f09d2c8bdbb4d8ae8bc4e2dcf29b6fa12c02f3f45345ed5
|
|
| SHA512 |
3559339baac231bf8656c73f359fbdf8ee9fb11cdfb53018da8342f5eea0acc6169825c3a7b9e95201622b5f5d0266a250b273bd3691ba500aaf07692cb2eae7
|
|
| ImpHash |
b729b61eb1515fcf7b3e511e4e66258b
|
| Icon |
Hash: 87e8cd52e12f3f9c03c805b07d8d7c22
Fuzzy: e9096e8a0731d790d39cfa0f8eab26bc dHash: 31e8dc8e8ec4e030 |
| Image Base | 0x00400000 |
| Entry Point | 0x0040354b |
| Compilation Time | 2010-04-10 12:19:31 |
| Checksum | 0x01cff0c1 (Actual: 0x01cff0c1) |
| OS Version | 5.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Digital Signature | OK |
| Imports |
8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION |
| Exports | 0 functions |
| Resources | 21 Resources |
| Sections | 5 Sections |
| CompanyName | Jansh |
| FileDescription | Jansh Middleware (For Assistant) |
| FileVersion | 1.0.25.0728 |
| LegalCopyright | Copyright(C) 2015 Jansh |
| ProductName | Assistant |
| ProductVersion | 1.0.25.0728 |
| Translation | 0x0000 0x04b0 |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
25,506 bytes | 25,600 bytes | 6.48 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
3291075913C14A1799655A261FB21CCA |
.rdata |
0x00008000 |
6,386 bytes | 6,656 bytes | 4.89 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
170563E94DE7EBFD6E622A164CE38C8A |
.data |
0x0000a000 |
419,484 bytes | 512 bytes | 1.43 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
23D69B1E3A55DEE07701198B7650A06B |
.ndata |
0x00071000 |
626,688 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x0010a000 |
30,840 bytes | 31,232 bytes | 3.82 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
BC9218107118578B4663854C0A59CA4E |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 9 | 25,064 bytes | |
| RT_DIALOG | 9 | 2,886 bytes | |
| RT_GROUP_ICON | 1 | 132 bytes | |
| RT_VERSION | 1 | 624 bytes | |
| RT_MANIFEST | 1 | 966 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!