WpsHelper.sys

Symantec Intrusion Detection

Symantec Corporation

It runs as a Windows 64-bit kernel mode device driver named “WpsHelper”.
Publisher:
Symantec Corporation  (signed and verified)

Product:
Symantec Intrusion Detection

Description:
Symantec Intrusion Detection - WpsHelper

Version:
12.4.0000.23

MD5:
c306d2037ec147c7c663994f12b87f1e

SHA-1:
5855a96bc98a03e6d7f0d05c000276104fc89eb4

SHA-256:
d904ffff3319f4cbf79e8f385f266e7fc4b560260d24e52f60a81358c0afab2c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2025 3:21:45 AM UTC  (today)

File size:
170 KB (174,056 bytes)

Product version:
12.4.0000.23

Copyright:
Copyright © 2009 Symantec Corporation. All rights reserved. Use of this product is subject to license terms.

Original file name:
WpsHelper.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\wpshelper.sys

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
9/7/2010 6:00:00 PM

Valid to:
11/23/2013 5:59:59 PM

Subject:
CN=Symantec Corporation, OU=Symantec Research Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
66660552D465B31F429F7527EA6A93BF

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
3072:GkT/MtwN341LxgmptMfUNEmdM+QNnXBTBffII:GcMtwNoNR1dsXBTBoI

Driver
Display name:
WpsHelper

Type:
Kernel device driver (KernelDriver)