Gridinsoft Logo
File Icon

The procexp64.exe File Analysis

Technical Analysis

File Name procexp64.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-14 21:00:17 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
2,405,960
File Size (bytes)
2025-11-14
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
739817f6f133842fb0ace1de5aa03c0c
SHA1
0b82fb1b404c2f4f345f99dbdff2b10ae1c67b80
SHA256
68ed896751e01029ee24b22493de5324fbf687273378124609e76bd07545fdde
SHA512
ae300216a139b43ab1baad507184276b2deb412ff0a3f64a1c6b4c5412baa5e145aa5ab67caeea13b3fa712d88083716341b15b4d8f507ef7744385e541065d6
ImpHash
994b14da736c8f6cdcca49337922ee88

PE Analysis

Basic Information

Icon
Hash: 158dea441b55ee899edff9c4f3f45b56
Fuzzy: 9ddd7b3b82251b6e5e90f8ca47bd0db7
dHash: d6f0f8e8b0b2e6c6
Image Base 0x140000000
Entry Point 0x1400e5d30
Compilation Time 2025-11-05 18:38:50
Checksum 0x00253bd6 (Actual: 0x00253bd6)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\__w\1\s\exe\x64\Release\procexp64.pdb
Digital Signature OK
Imports 25 libraries
Exports 0 functions
Resources 252 Resources
Sections 6 Sections

Version Information

CompanyName Sysinternals - www.sysinternals.com
FileDescription Sysinternals Process Explorer
FileVersion 17.07
InternalName Process Explorer
LegalCopyright Copyright © 1998-2025 Mark Russinovich
LegalTrademarks Copyright © 1998-2025 Mark Russinovich
OriginalFilename Procexp.exe
ProductName Process Explorer
ProductVersion 17.07
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,164,140 bytes 1,164,288 bytes 6.41 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B15084D6343312CC4E276EBEDBDDD246
.rdata 0x0011e000 314,868 bytes 314,880 bytes 5.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 55CEEF45337E1AAD7A760570B4F1D20D
.data 0x0016b000 265,708 bytes 54,272 bytes 2.99 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9D0DD32A5DC37BCAF87A50AC47E420B2
.pdata 0x001ac000 42,012 bytes 42,496 bytes 6.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F4A47280BFB33F60078859228B64FD0B
.rsrc 0x001b7000 812,056 bytes 812,544 bytes 4.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9BA9AE3B40AFB47FAFA21B6B4C005077
.reloc 0x0027e000 6,032 bytes 6,144 bytes 5.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C0C10F49750C197851966AEEA8232347

Resource Analysis

Total Resources: 252 (797,984 bytes)
Resource Type Count Total Size Percentage
BINRES 1 38,448 bytes
4.8%
INI 1 1,175 bytes
0.1%
RT_CURSOR 3 924 bytes
0.1%
RT_ICON 118 680,992 bytes
85.3%
RT_MENU 9 4,170 bytes
0.5%
RT_DIALOG 60 59,830 bytes
7.5%
RT_STRING 28 7,002 bytes
0.9%
RT_ACCELERATOR 3 480 bytes
0.1%
RT_GROUP_CURSOR 3 60 bytes
0%
RT_GROUP_ICON 24 1,796 bytes
0.2%
RT_VERSION 1 952 bytes
0.1%
RT_MANIFEST 1 2,155 bytes
0.3%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware