Gridinsoft Logo

The upx.exe (UPX executable packer) File Analysis

Technical Analysis

File Name upx.exe
File Type
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Scanner Version 1.0.211.174
Database Version 2025-03-19 08:00:28 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
305,152
File Size (bytes)
2025-03-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e9eacbb7ab4b3f66019e0a2f13a1dba9
SHA1
ae30894b29e52bf04afc4a54795d438fb910acff
SHA256
0c3dc789d0a46493bd097526b920d913d930d96b1052cb331eec3ac560c89996
SHA512
925445d20c93c65a282fc59f773551d824bff1f8e2623fd8ea0c587831a9550c400f121defb3d82c8f0401903fa69e3154dc98e29688d02af1d5d01247914a06
ImpHash
a75d408dd51ece143f6aacfda06a28da

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x0059a3d0
Compilation Time 1970-01-01 00:00:00
Checksum 0x00000000 (Actual: 0x00055543)
OS Version 4.0
PEiD Signatures PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Digital Signature No valid SignedData structure was found.
Imports 2 libraries
KERNEL32, msvcrt
Exports 0 functions
Resources 2 Resources
Sections 3 Sections

Version Information

CompanyName The UPX Team http://upx.sf.net
FileDescription UPX executable packer
FileVersion 3.91 (2013-09-30)
InternalName upx.exe
LegalCopyright © 1996-2013 Markus F.X.J. Oberhumer
OriginalFilename upx.exe
ProductName UPX
ProductVersion 3.91 (2013-09-30)
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 1,376,256 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x00151000 303,104 bytes 303,104 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D53D2B040889E26BD220F3D7B8A4E99D
.rsrc 0x0019b000 4,096 bytes 1,536 bytes 4.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FA3E4759171BD98E233CB480EC7DF276
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

Total Resources: 2 (1,089 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 792 bytes
72.7%
RT_MANIFEST 1 297 bytes
27.3%

Certificate Chain Analysis

Certificate Information
Product UPX
Description UPX executable packer
File Version 3.91 (2013-09-30)
Original Name upx.exe
Internal Name upx.exe
Copyright © 1996-2013 Markus F.X.J. Oberhumer

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware