Gridinsoft Logo

The ep_setup.exe (ExplorerPatcher Setup Program) File Analysis

Updated 2 months ago
Checked by Malware Check
ep_setup.exe

Technical Analysis

File Name ep_setup.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.228.174
Database Version 2025-11-05 18:00:25 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
12,009,984
File Size (bytes)
2025-11-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
77d0a1aad0fb5f3d659361a7b1a792b8
SHA1
ff27b5ffc9743ee0765207654a054dbf5859b016
SHA256
8e3dd4f24f65234cfc2aaae7d84f2a9ebc167ab47cb50f4422d5974d44d5ffe7
SHA512
560702d7901be4f980176078eccea01d5f37830c6ee22b78dc9b81bb6adacf8d6b6b8707b3b802aea9bda02d41eabe9e836a3223c1d3121e261394ed78491ecf
ImpHash
f4d7369e1f4fee3b6a9318010146c0d7

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140009358
Compilation Time 2025-11-03 22:05:20
Checksum 0x00000000 (Actual: 0x00b81665)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\a\ExplorerPatcher\ExplorerPatcher\build\Release\x64\ep_setup.pdb
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, RstrtMgr, VERSION, SHLWAPI
Exports 0 functions
Resources 41 Resources
Sections 7 Sections

Version Information

▼
CompanyName ExplorerPatcher Developers
FileDescription ExplorerPatcher Setup Program
FileVersion 26100.4946.69.6
InternalName ep_setup.exe
LegalCopyright (C) 2021-2025 ExplorerPatcher Developers. All rights reserved.
OriginalFilename ep_setup.exe
ProductName ExplorerPatcher
ProductVersion 26100.4946.69.6
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 156,224 bytes 156,672 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 589B089B9454A72D2A1B49F361036948
.rdata 0x00028000 65,984 bytes 66,048 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B9F249B32147BEB94FE884E4981AB59C
.data 0x00039000 7,732 bytes 3,072 bytes 1.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 974987438A4C7D090BFB925480128CF0
.pdata 0x0003b000 6,996 bytes 7,168 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B578F4DDFBD7EE99886CA8F0556B6EC8
.fptable 0x0003d000 256 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0003e000 11,772,976 bytes 11,773,440 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 36A513CDC7FDE27A81D146D21D93DFB4
.reloc 0x00b79000 1,712 bytes 2,048 bytes 5.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D3F94252BC8BA072ECE875C18BFCEEB2
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 41 (11,771,620 bytes)
Resource Type Count Total Size Percentage
RT_STRING 38 39,792 bytes
0.3%
RT_RCDATA 1 11,730,294 bytes
99.6%
RT_VERSION 1 896 bytes
0%
RT_MANIFEST 1 638 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product ExplorerPatcher
Description ExplorerPatcher Setup Program
File Version 26100.4946.69.6
Original Name ep_setup.exe
Internal Name ep_setup.exe
Copyright (C) 2021-2025 ExplorerPatcher Developers. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware