home

explorer.exe

Windows Explorer

Microsoft Corporation

This is the core UI for Windows, a resource-browsing and management application that provides the ability to taverse the operating system, manage files and the desktop. It is included with the Windows 7 OS. The file has been seen being downloaded from download1631.mediafire.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Windows Explorer

 
Part of the Windows 7 Operating System

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
ee6221439b3b8c58838e0e4459b38de9

SHA-1:
e613f1995cb382cfdd1bb04f789749870bc094d3

SHA-256:
de26222f647a2de04240498e89dcc45941a90329a452abb583b3b5fdb3c8b99a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/26/2024 12:40:22 PM UTC  (today)

File size:
2 MB (2,131,456 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
EXPLORER.EXE.MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\explorer.exe

File PE Metadata
Compilation timestamp:
10/30/2009 7:35:29 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:7wPz1ubtHXPQvYYYYYYYYYYYRYYYYYYYYYYp0AA7/eFGMmv:kPcbtIvYYYYYYYYYYYRYYYYYYYYYYp0D

Entry address:
0x2A8CB

Entry point:
E8, 93, F6, FF, FF, 6A, 5C, 68, 00, AA, 02, 01, E8, D8, 41, 00, 00, 33, DB, 89, 5D, E4, 89, 5D, FC, 8D, 45, 94, 50, FF, 15, 88, 12, 00, 01, C7, 45, FC, FE, FF, FF, FF, C7, 45, FC, 01, 00, 00, 00, 64, A1, 18, 00, 00, 00, 8B, 70, 04, 89, 5D, E0, BF, EC, 1F, 0B, 01, 53, 56, 57, FF, 15, 0C, 11, 00, 01, 3B, C3, 0F, 85, 3C, F2, 02, 00, 33, F6, 46, A1, 74, 11, 0B, 01, 3B, C6, 0F, 84, 4B, F2, 02, 00, A1, 74, 11, 0B, 01, 85, C0, 0F, 85, 1A, 01, 00, 00, 89, 35, 74, 11, 0B, 01, 68, FC, A9, 02, 01, 68, F0, A9, 02, 01...
 
[+]

Entropy:
6.0007

Code size:
700.5 KB (717,312 bytes)

Autoplay Handler
Display name:
MSOpenFolder


The file explorer.exe has been seen being distributed by the following 4 URLs.

http://download1631.mediafire.com/hxlotc5vbq8g/.../explorer.exe

https://ps2xka.bn1.livefilestore.com/.../explorer.exe

http://download977.mediafire.com/e81ns1zhzzog/.../explorer.exe

http://download1884.mediafire.com/02jy0b2jijcg/.../explorer.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.