VBEUI.DLL

  • File Path: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\VBEUI.DLL
  • Description: Microsoft Visual Basic for Applications component

Hashes

Type Hash
MD5 C658E9D2F20A53C134E4E8531735B535
SHA1 54CEAC1FD794AE8772334862927EEBD4133DBCC6
SHA256 9255A41DB774F3CC42807D70CA248EE447B395F7FDF4BDF5551AE3CF98F7D699
SHA384 071F8EAA69F6208E17F07B2405618441956A4726698BC477589E5A64EE930588E092C1681ACAE10ECFE94E42753E6438
SHA512 F854FA74456B93062B98316E311A9C1200A52F50A5159F07C5E1A854CDF83B1356A7BCF9C50FBAA708458D62DC9000F7BC5B96B1D00CEB3FE2E15151EB0AB941
SSDEEP 24576:lpSjzvluA9LPU+hD31sz710NZA1AUc3DcwnBkj3BUixR88Y6/ScusIFPCR29GsrL:lQNu8h0yZqAZARj3o8B/Scu35QyL
IMP E4EFD3F05CAD2E6C1661041EC1D0D604
PESHA1 E1DA83AC526F1E95C3BA529BE52543891ECA6B6F
PE256 0B35F2C9424DC44177C676466276DC3780EEF6D5640206116E179E8BC2A8195C

DLL Exports:

Function Name Ordinal Type
_PickFontBiVBA@16 61 Exported Function
_ResetFontCacheBiVBA@4 62 Exported Function
_ObTextOutBiVBA@24 59 Exported Function
_PaintLineCoreBiVBA@4 60 Exported Function
_VersionNumberBiVBA@0 65 Exported Function
_WCheckPlatformBiVBA@0 66 Exported Function
_VbeuiEnterpriseProtect@8 63 Exported Function
_VbeuiFIsEdpEnabled@0 64 Exported Function
_MsoSetLocale@4 40 Exported Function
_MsoSetVbaInterfaces@8 41 Exported Function
_MsoPeekMessage@8 38 Exported Function
_MsoRgchToRgwch@16 39 Exported Function
_MsoVbaInitSecurity@4 54 Exported Function
_MsoWideCharToMultiByte@32 55 Exported Function
_MsoUninitOffice@4 47 Exported Function
_MsoVBADigSigCallDlg@20 48 Exported Function
_XFromIchCoreBiVBA@4 67 Exported Function
MsoVBADigSigPutSignedDataMsg 51 Exported Function
MsoVBADigSigRemoveSignedDataMsg 52 Exported Function
MsoVBADigSigCreateIndirectData 49 Exported Function
MsoVBADigSigGetSignedDataMsg 50 Exported Function
MsoWintrustFinalPolicy 57 Exported Function
MsoWintrustTestPolicy 58 Exported Function
MsoVBADigSigVerifyIndirectData 53 Exported Function
MsoWintrustCertificateTrust 56 Exported Function
DllGetLCID 5 Exported Function
MsoSoftpubCheckCert 42 Exported Function
DllCanUnloadNow 3 Exported Function
DllGetClassObject 4 Exported Function
MsoSoftpubLoadMessage 45 Exported Function
MsoSoftpubLoadSignature 46 Exported Function
MsoSoftpubCleanupPolicy 43 Exported Function
MsoSoftpubInitialize 44 Exported Function
_MsoMultiByteToWideChar@24 37 Exported Function
_MsoFCreateITFCHwnd@20 14 Exported Function
_MsoFCreateStdComponentManager@20 15 Exported Function
_MsoFCreateControl@36 12 Exported Function
_MsoFCreateIPref@28 13 Exported Function
_MsoFGetFontSettings@20 18 Exported Function
_MsoFGetTooltips@0 19 Exported Function
_MsoFCreateToolbarSet@28 16 Exported Function
_MsoFGetComponentManager@4 17 Exported Function
_IchFromXCoreBiVBA@4 6 Exported Function
_MsoChsFromLid@4 7 Exported Function
_CreateCaretBiVBA@20 1 Exported Function
_DestroyCaretBiVBA@4 2 Exported Function
_MsoDestroyITFC@4 10 Exported Function
_MsoFAnsiCodePageSupportsLCID@8 11 Exported Function
_MsoCpgFromChs@4 8 Exported Function
_MsoDestroyIPref@4 9 Exported Function
_MsoFHandledMessageNeeded@4 20 Exported Function
_MsoFWndProcNeeded@4 31 Exported Function
_MsoGetControlInstanceId@8 32 Exported Function
_MsoFSetTooltips@4 29 Exported Function
_MsoFWndProc@24 30 Exported Function
_MsoHrSimpleQueryInterface2@20 35 Exported Function
_MsoHrSimpleQueryInterface@16 36 Exported Function
_MsoHpalOffice@0 33 Exported Function
_MsoHrRegisterAll@0 34 Exported Function
_MsoFLoadToolbarSet@24 23 Exported Function
_MsoFLongLoad@8 24 Exported Function
_MsoFIEPolicyAndVersion@8 21 Exported Function
_MsoFInitOffice@20 22 Exported Function
_MsoFSetComponentManager@4 27 Exported Function
_MsoFSetHMsoinstOfSdm@4 28 Exported Function
_MsoFLongSave@8 25 Exported Function
_MsoFPitbsFromHwndAndMsg@12 26 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 33000002CE7C9ACE7D905ED2B70000000002CE
  • Thumbprint: B10607FB914700B40F794610850C1DE0A21566C1
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: VBEUI.DLL
  • Product Name: Microsoft Visual Basic for Applications
  • Company Name: Microsoft Corporation
  • File Version: 7.1.16.12325
  • Product Version: 7.1.16.12325
  • Language: Language Neutral
  • Legal Copyright: 2018 Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/9255a41db774f3cc42807d70ca248ee447b395f7fdf4bdf5551ae3cf98f7d699/detection/

Possible Misuse

The following table contains possible examples of VBEUI.DLL being misused. While VBEUI.DLL is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma image_load_susp_winword_vbadll_load.yml - '\VBEUI.DLL' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.