Gridinsoft Logo
File Icon

The gsam.exe (Anti-Malware (64-bit)) File Analysis

Technical Analysis

File Name gsam.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.211.174
Database Version 2025-03-19 02:00:30 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
27,012,096
File Size (bytes)
2025-03-19
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
650ce0ef25d8e761d48a5a1430d100b5
SHA1
57f9976d6902ec9ec84c2c895560d0111dbf7bcf
SHA256
09980ff88c3a43bdf4462fb473573f3fc9da9af2b1cd19d8d1927e37934b59b9
SHA512
3c3f7753c2a0d6f29f4418d347e7a14a3134f8281b83a8b73ec3aa2fbf95f26126c38dbf458b644b9bd73b31d48319e7455ac2bd9ecd543d8044e8e48078f3f2
ImpHash
62b96fec5b2aab421d73b23e96c99830

PE Analysis

Basic Information

Icon
Hash: d3dad3e418d61c0671e965ff7b7b56b3
Fuzzy: ae4fce3429c1038e33f8e24d128d6542
dHash: 38f4faf0f0d98638
Image Base 0x00400000
Entry Point 0x012e5020
Compilation Time 2025-03-17 21:36:57
Checksum 0x019c6dba (Actual: 0x019c6dba)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 27 libraries
Exports 3 functions
Resources 367 Resources
Sections 11 Sections

Version Information

ProductName Gridinsoft® Anti-Malware
ProductVersion 4.3.55
CompanyName Gridinsoft LLC
LegalCopyright © Gridinsoft LLC, 2025
LegalTrademarks Gridinsoft®
InternalName gsam
OriginalFilename gsam.exe
FileVersion 4.3.55.5847
FileDescription Anti-Malware (64-bit)
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 15,822,756 bytes 15,822,848 bytes 5.72 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 17DEDB4A1A5C095486ECA85562086D8E
.data 0x00f18000 1,404,264 bytes 1,404,416 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6E41BDC61C8711C31130270F21C7291C
.bss 0x0106f000 827,064 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x01139000 37,646 bytes 37,888 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9B80B97D07BC3082AB5C7F5A83E4D0CC
.didata 0x01143000 5,942 bytes 6,144 bytes 3.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EC18BEBC6EC41CE55B9EF419B48EC0F2
.edata 0x01145000 150 bytes 512 bytes 1.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2759119FDA1AEA303575ABF3A69DFFAA
.tls 0x01146000 664 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x01147000 109 bytes 512 bytes 1.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 24EF9EE9B5AC824FD39FAC1C0605FFBD
.reloc 0x01148000 759,536 bytes 759,808 bytes 6.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E3C81226BE0534B9F6F7AAF197D361E8
.pdata 0x01202000 800,604 bytes 800,768 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 46DD239F3D93C9F1E12C98CF8BAE3150
.rsrc 0x012c6000 8,167,936 bytes 8,167,936 bytes 7.77 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B9352E8B03B6DAEB83FE413508896660
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 367 (8,142,254 bytes)
Resource Type Count Total Size Percentage
UNICODEDATA 6 191,535 bytes
2.4%
VCLSTYLE 1 86,732 bytes
1.1%
WAVE 2 498,246 bytes
6.1%
RT_CURSOR 23 11,484 bytes
0.1%
RT_BITMAP 29 11,144 bytes
0.1%
RT_ICON 5 35,585 bytes
0.4%
RT_DIALOG 2 164 bytes
0%
RT_STRING 90 93,140 bytes
1.1%
RT_RCDATA 183 7,211,928 bytes
88.6%
RT_GROUP_CURSOR 23 460 bytes
0%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 812 bytes
0%
RT_MANIFEST 1 948 bytes
0%

Certificate Chain Analysis

Certificate Information
Product Gridinsoft® Anti-Malware
Description Anti-Malware (64-bit)
File Version 4.3.55.5847
Original Name gsam.exe
Signing Date 10:37 PM 03/17/2025 (81 days ago)
Verification Status Signed
Signers Gridinsoft TOV; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name gsam
Copyright © Gridinsoft LLC, 2025
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gridinsoft TOV #2 Chain
Validity Period: 2025-03-04 00:00:00 → 2026-03-24 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 73 31 E7 4F 7E 54 4A 22 1B 36 EF 4D B3 54 70
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware