Gridinsoft Logo
File Icon

The explorer.exe (Windows Explorer) File Analysis

Updated 11 hours ago
Checked by Malware Check
explorer.exe

Technical Analysis

File Name explorer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.233.174
Database Version 2026-01-09 15:00:23 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
3,191,352
File Size (bytes)
2026-01-09
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
30420cf0f96c4313e058343b4c301f96
SHA1
ea5ea3c0c3e82f7371836643c5ec265da6d02efa
SHA256
11aef65ef73c2d8fdf6688fbbd16f60c1b58641c46405a1b0fb0f9c2c5b35402
SHA512
cf7714300fe0f7d3fc842597aeb0756e2044163299bb039e9f8bcc373ff0b0885fe8082ba6b09b43c7814056febe736e5f1af9f8a09eb0ab52b808e9f0a895c4
ImpHash
3c7ed17f97d7578122728875d302eef5

PE Analysis

Basic Information

▼
Icon
Hash: 192d634cba70dbf6b284a57a3e112b61
Fuzzy: eb1d6f79bb1220f126fb6ef58b8aa6d6
dHash: 0dfcf3fffc3f3f3b
Image Base 0x140000000
Entry Point 0x1400b72f0
Compilation Time 1987-09-19 00:34:36
Checksum 0x0030e12f (Actual: 0x0030e12f)
OS Version 10.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path explorer.pdb
Digital Signature OK
Imports 130 libraries
Exports 1 functions
Resources 207 Resources
Sections 9 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Windows Explorer
FileVersion 10.0.26100.7462 (WinBuild.160101.0800)
InternalName explorer
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename EXPLORER.EXE
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.7462
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,928,012 bytes 1,929,216 bytes 6.37 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7D56EF5C1DB74853B7C4C1CF8B774C47
fothk 0x001d8000 4,096 bytes 4,096 bytes 0.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F86E20192F2EA1BC03D457D32D273C16
.imrsiv 0x001d9000 4 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x001da000 434,268 bytes 438,272 bytes 5.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FBC80600BC4F21057443BC9EA67FA7DF
.data 0x00245000 22,048 bytes 8,192 bytes 2.99 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6715DB9DDB40A35D87A6F47D10D15168
.pdata 0x0024b000 75,036 bytes 77,824 bytes 5.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7B4B0884425151A4F579802DC8A2AAD3
.didat 0x0025e000 1,472 bytes 4,096 bytes 1.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 26C6290321082DBC4D0DB7EBC2CE096A
.rsrc 0x0025f000 679,384 bytes 679,936 bytes 6.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 490CCF6B9DBB5B12275356B0A13582D0
.reloc 0x00305000 7,152 bytes 8,192 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3802DDDE0B69EE9678D0343571409467

Resource Analysis

▼
Total Resources: 207 (669,172 bytes)
Resource Type Count Total Size Percentage
MUI 1 224 bytes
0%
RT_ICON 181 664,037 bytes
99.2%
RT_GROUP_ICON 23 2,672 bytes
0.4%
RT_VERSION 1 912 bytes
0.1%
RT_MANIFEST 1 1,327 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft® Windows® Operating System
Description Windows Explorer
File Version 10.0.26100.7462 (WinBuild.160101.0800)
Original Name EXPLORER.EXE
Signing Date 08:33 AM 12/06/2025 (34 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name explorer
Copyright © Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2025-06-19 18:11:43 → 2026-06-17 18:11:43
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 05 18 41 84 19 AD CB AD 29 4F 00 00 00 00 05 18
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2025-01-30 19:42:57 → 2026-04-22 19:42:57
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 02 0A 47 B2 14 D9 EE B2 B3 0F 00 01 00 00 02 0A
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware