Gridinsoft Logo
File Icon

The winexp.exe (WinExplorer) File Analysis

Updated 10 months ago
Checked by Malware Check
winexp.exe

Technical Analysis

File Name winexp.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.185.174
Database Version 2024-08-29 16:00:50 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
52,736
File Size (bytes)
2024-08-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
20fe176f5d63cb53bdeb227410238ef0
SHA1
6012c9a32950047fb2f0d429c7fbe5a572ed370b
SHA256
6ee2ee07fa47e4512595dfa8ec8747c956db0eb716e420390cfceb8a318c4c2b
SHA512
43163ac68f91581fb93c7517e60bd7254bab0fe65acd523071fc6543cda2592540906f1127642ab78f595b52500e3b0c115c72c8e094a48243fb7c8b456ca8fe
ImpHash
bce31ae21160ec206a8f5937b60beb0a

PE Analysis

Basic Information

▼
Icon
Hash: e2daef16708dbfa7fd9104a077c36ce4
Fuzzy: fd10dbccdae6fa9597b1bfcce4c0e58c
dHash: 818da080a0a08082
Image Base 0x00400000
Entry Point 0x004150b0
Compilation Time 2003-07-09 14:23:39
Checksum 0x00000000 (Actual: 0x0001bd93)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature The PE file does not contain a certificate table.
Imports 8 libraries
KERNEL32, ADVAPI32, COMCTL32, comdlg32, GDI32, MSVCRT, SHELL32, USER32
Exports 0 functions
Resources 107 Resources
Sections 3 Sections

Version Information

▼
Comments
CompanyName NirSoft
FileDescription WinExplorer
FileVersion 1.30
InternalName WinExplorer
LegalCopyright Copyright © 1999 - 2003 Nir Sofer
LegalTrademarks
OriginalFilename winexp.exe
PrivateBuild
ProductName WinExplorer
ProductVersion 1.30
SpecialBuild
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 69,632 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x00012000 16,384 bytes 13,312 bytes 7.73 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5599FA11B16A2085E66CC2B979CA192A
.rsrc 0x00016000 40,960 bytes 38,400 bytes 3.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0B587CE446227297A2A683982786305B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 107 (46,680 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 1 308 bytes
0.7%
RT_BITMAP 20 6,760 bytes
14.5%
RT_ICON 47 30,232 bytes
64.8%
RT_DIALOG 11 7,714 bytes
16.5%
RT_GROUP_CURSOR 1 20 bytes
0%
RT_GROUP_ICON 26 814 bytes
1.7%
RT_VERSION 1 832 bytes
1.8%

Certificate Chain Analysis

▼
Certificate Information
Product WinExplorer
Description WinExplorer
File Version 1.30
Original Name winexp.exe
Internal Name WinExplorer
Copyright Copyright © 1999 - 2003 Nir Sofer

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware