Gridinsoft Logo
File Icon

The Endorphin.exe (Employee Planner Application File) File Analysis

Updated 15 days ago
Checked by Malaware Check
Endorphin.exe

Technical Analysis

File Name Endorphin.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-23 07:00:17 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
9,478,632
File Size (bytes)
2025-05-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
1e23ffcfe1cbc1f581502ff73e9e61b9
SHA1
3f85099590a1977c370b2ecb531ba42ff3581173
SHA256
baeae7d9df892fffd1b96c9516779606f2b1179de578961c32d2b92739739a2c
SHA512
23c211e2195a1825cb1d743bd5e48a2e8389522fc5635e4645a2e74095220031cf8cb2fbf8b150e8fb9c6219f2577c590c1c265060153d75cdec38e8e752227d
ImpHash
90a57c1d3171b45b03dad433d7fec75a

PE Analysis

Basic Information

▼
Icon
Hash: 902b14b048b9f861ca112926cba1b49d
Fuzzy: b1d442a1b0b04c91ff0c30f9ff80456b
dHash: e9c088b8c4888396
Image Base 0x00400000
Entry Point 0x0068875d
Compilation Time 2023-07-07 04:00:30
Checksum 0x008e94e3 (Actual: 0x00916354)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path E:\My Projects\Employee Planner\Employee Planner_5_JUL_2023\Release\Employee Planner.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 18 libraries
Exports 0 functions
Resources 269 Resources
Sections 5 Sections

Version Information

▼
Comments Employee Planner Application Used To Managed All Type of Record Of Employee In Any Company.
CompanyName DRPU Software Pvt. Ltd.
FileDescription Employee Planner Application File
FileVersion 5.2.1.3
InternalName Employee Planner
LegalCopyright Copyright © 2007-2023 DRPU Software Pvt. Ltd. All rights reserved.
OriginalFilename Employee Planner.exe
ProductName Employee Planner
ProductVersion 5.2.1.3
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 3,414,940 bytes 3,415,040 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9B522A90386CEA5E300263BAD5742669
.rdata 0x00343000 821,402 bytes 821,760 bytes 5.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2B049232E355C675315FE36A8DFD1872
.data 0x0040c000 140,636 bytes 95,744 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 877BD76260E470EF3CCA6A667093A9FA
.rsrc 0x0042f000 1,499,432 bytes 1,499,648 bytes 5.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EA3F342745DDFEA7FF841B66E600E95D
.reloc 0x0059e000 3,618,816 bytes 3,618,816 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7E0DD42BC32C7673C3F155C8D541B307
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 269 (1,485,988 bytes)
Resource Type Count Total Size Percentage
RT_CURSOR 19 5,596 bytes
0.4%
RT_BITMAP 28 862,968 bytes
58.1%
RT_ICON 29 431,752 bytes
29.1%
RT_MENU 10 9,908 bytes
0.7%
RT_DIALOG 99 144,802 bytes
9.7%
RT_STRING 29 13,828 bytes
0.9%
RT_ACCELERATOR 2 104 bytes
0%
RT_GROUP_CURSOR 17 368 bytes
0%
RT_GROUP_ICON 15 496 bytes
0%
RT_VERSION 1 1,108 bytes
0.1%
RT_MANIFEST 1 381 bytes
0%
None 19 14,677 bytes
1%

Certificate Chain Analysis

▼
Certificate Information
Product Employee Planner
Description Employee Planner Application File
File Version 5.2.1.3
Original Name Employee Planner.exe
Signing Date 09:20 AM 04/01/2025 (67 days ago)
Verification Status The digital signature of the object did not verify.
Signers Shenzhen HappyDog Technology Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name Employee Planner
Copyright Copyright © 2007-2023 DRPU Software Pvt. Ltd. All rights reserved.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2013-08-01 12:00:00 → 2038-01-15 12:00:00
Signature Algorithm: sha384RSA
Serial Number: 05 9B 1B 57 9E 8E 21 32 E2 39 07 BD A7 77 75 5C
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-01-13 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0F D1 BB CA 79 6B D7 F8 DD 4C 82 E1 0A 9A 96 31
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Shenzhen HappyDog Technology Co., Ltd. #4 Chain
Validity Period: 2023-01-05 00:00:00 → 2026-01-04 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 31 07 74 AE 30 76 21 91 6C 51 2B 01 26 50 AC
DigiCert Timestamp 2024 #5 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #6 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #7 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware