WpsHelper.sys
Symantec Intrusion Detection
Symantec Corporation
It runs as a Windows 64-bit kernel mode device driver named “WpsHelper”.

Product:
Symantec Intrusion Detection
Description:
Symantec Intrusion Detection - WpsHelper
MD5:
c306d2037ec147c7c663994f12b87f1e
SHA-1:
5855a96bc98a03e6d7f0d05c000276104fc89eb4
SHA-256:
d904ffff3319f4cbf79e8f385f266e7fc4b560260d24e52f60a81358c0afab2c
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Analysis date:
4/23/2025 3:21:45 AM UTC (today)
File size:
170 KB (174,056 bytes)
Product version:
12.4.0000.23
Copyright:
Copyright © 2009 Symantec Corporation. All rights reserved. Use of this product is subject to license terms.
Original file name:
WpsHelper.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\wpshelper.sys
Valid from:
9/7/2010 6:00:00 PM
Valid to:
11/23/2013 5:59:59 PM
Subject:
CN=Symantec Corporation, OU=Symantec Research Labs, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Symantec Corporation, L=Santa Monica, S=California, C=US
Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
66660552D465B31F429F7527EA6A93BF
CTPH (ssdeep):
3072:GkT/MtwN341LxgmptMfUNEmdM+QNnXBTBffII:GcMtwNoNR1dsXBTBoI
Driver
Type:
Kernel device driver (KernelDriver)

