Gridinsoft Logo
File Icon

The gsam.exe (Anti-Malware (64-bit)) File Analysis

Technical Analysis

File Name gsam.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.214.174
Database Version 2025-04-18 11:00:20 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
27,012,096
File Size (bytes)
2025-04-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
89120a692d1fe31183aae666759e0877
SHA1
8a2b24a531e40bebe43112fa20f630375caa8739
SHA256
0d1b0dad7aa17bf8072ce973ed7bdbba3c6f1963b6f53820b760585742dcaf87
SHA512
8d7e97cbd79f5b0537ddfbd708ec84242195cac4a47eefb71da8eab51b1ff0b2ee419a1e1e23515187174c38e647c5e840b5982222f83761f8121c1f691ae3b8
ImpHash
62b96fec5b2aab421d73b23e96c99830

PE Analysis

Basic Information

Icon
Hash: d3dad3e418d61c0671e965ff7b7b56b3
Fuzzy: ae4fce3429c1038e33f8e24d128d6542
dHash: 38f4faf0f0d98638
Image Base 0x00400000
Entry Point 0x012e5070
Compilation Time 2025-04-15 15:24:45
Checksum 0x019c4603 (Actual: 0x019c4603)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 27 libraries
Exports 3 functions
Resources 367 Resources
Sections 11 Sections

Version Information

ProductName Gridinsoft® Anti-Malware
ProductVersion 4.3.58
CompanyName Gridinsoft LLC
LegalCopyright © Gridinsoft LLC, 2025
LegalTrademarks Gridinsoft®
InternalName gsam
OriginalFilename gsam.exe
FileVersion 4.3.58.5850
FileDescription Anti-Malware (64-bit)
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 15,822,836 bytes 15,822,848 bytes 5.72 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DDEEA4D7AF643B7CC97E128492DAB402
.data 0x00f18000 1,404,264 bytes 1,404,416 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DB116E41C6C9BABF7898E66F135E12FB
.bss 0x0106f000 827,064 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x01139000 37,646 bytes 37,888 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9B80B97D07BC3082AB5C7F5A83E4D0CC
.didata 0x01143000 5,942 bytes 6,144 bytes 3.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EC18BEBC6EC41CE55B9EF419B48EC0F2
.edata 0x01145000 150 bytes 512 bytes 1.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2759119FDA1AEA303575ABF3A69DFFAA
.tls 0x01146000 664 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x01147000 109 bytes 512 bytes 1.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 24EF9EE9B5AC824FD39FAC1C0605FFBD
.reloc 0x01148000 759,540 bytes 759,808 bytes 6.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E8068CF59F7960750FE5DA0B31C94F75
.pdata 0x01202000 800,604 bytes 800,768 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E5401639F9B93ADD20D7D989EAC65490
.rsrc 0x012c6000 8,167,936 bytes 8,167,936 bytes 7.77 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 68C12ADAAF3BDFAE51A9489DB57DEB04
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 367 (8,142,254 bytes)
Resource Type Count Total Size Percentage
UNICODEDATA 6 191,535 bytes
2.4%
VCLSTYLE 1 86,732 bytes
1.1%
WAVE 2 498,246 bytes
6.1%
RT_CURSOR 23 11,484 bytes
0.1%
RT_BITMAP 29 11,144 bytes
0.1%
RT_ICON 5 35,585 bytes
0.4%
RT_DIALOG 2 164 bytes
0%
RT_STRING 90 93,140 bytes
1.1%
RT_RCDATA 183 7,211,928 bytes
88.6%
RT_GROUP_CURSOR 23 460 bytes
0%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 812 bytes
0%
RT_MANIFEST 1 948 bytes
0%

Certificate Chain Analysis

Certificate Information
Product Gridinsoft® Anti-Malware
Description Anti-Malware (64-bit)
File Version 4.3.58.5850
Original Name gsam.exe
Signing Date 03:25 PM 04/15/2025 (53 days ago)
Verification Status Signed
Signers Gridinsoft TOV; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name gsam
Copyright © Gridinsoft LLC, 2025
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gridinsoft TOV #2 Chain
Validity Period: 2025-03-04 00:00:00 → 2026-03-24 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 73 31 E7 4F 7E 54 4A 22 1B 36 EF 4D B3 54 70
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware