Gridinsoft Logo

The ep_setup.exe (ExplorerPatcher Setup Program) File Analysis

Updated 3 months ago
Checked by Malware Check
ep_setup.exe

Technical Analysis

File Name ep_setup.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.226.174
Database Version 2025-09-28 13:00:31 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
12,009,472
File Size (bytes)
2025-09-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
510a06a3f6f9fdcd18d0d91134186e2b
SHA1
ea20a37350e3014f29fac00faa51de9839f0b69d
SHA256
05dc0ce008728e75430b303f2f009253b8aa712036c546d41c0f2def7639039e
SHA512
a1e024d1696a8099ac69ee7a446e4ca47d371451f6e5965bfae22a48c6da59dcc465d66b1d9df68ef2858ee0c7aee6da42cf242a5b73ec72173eca0b199cf19d
ImpHash
f4d7369e1f4fee3b6a9318010146c0d7

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140009358
Compilation Time 2025-09-18 07:59:59
Checksum 0x00000000 (Actual: 0x00b74874)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\ExplorerPatcher\ExplorerPatcher\build\Release\x64\ep_setup.pdb
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, RstrtMgr, VERSION, SHLWAPI
Exports 0 functions
Resources 41 Resources
Sections 7 Sections

Version Information

▼
CompanyName ExplorerPatcher Developers
FileDescription ExplorerPatcher Setup Program
FileVersion 26100.4946.69.3
InternalName ep_setup.exe
LegalCopyright (C) 2021-2024 ExplorerPatcher Developers. All rights reserved.
OriginalFilename ep_setup.exe
ProductName ExplorerPatcher
ProductVersion 26100.4946.69.3
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 156,224 bytes 156,672 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 589B089B9454A72D2A1B49F361036948
.rdata 0x00028000 65,984 bytes 66,048 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 122C80E345AB9CA770CD57A1D4958767
.data 0x00039000 7,732 bytes 3,072 bytes 1.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 974987438A4C7D090BFB925480128CF0
.pdata 0x0003b000 6,996 bytes 7,168 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B578F4DDFBD7EE99886CA8F0556B6EC8
.fptable 0x0003d000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0003e000 11,772,432 bytes 11,772,928 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0E036C8C36A4E2150C3C9215BF4AB198
.reloc 0x00b79000 1,712 bytes 2,048 bytes 5.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D3F94252BC8BA072ECE875C18BFCEEB2
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 41 (11,771,072 bytes)
Resource Type Count Total Size Percentage
RT_STRING 38 39,792 bytes
0.3%
RT_RCDATA 1 11,729,746 bytes
99.6%
RT_VERSION 1 896 bytes
0%
RT_MANIFEST 1 638 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product ExplorerPatcher
Description ExplorerPatcher Setup Program
File Version 26100.4946.69.3
Original Name ep_setup.exe
Internal Name ep_setup.exe
Copyright (C) 2021-2024 ExplorerPatcher Developers. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware