The adguardInstaller exe Adguard Software Ltd File Malware Analysis
Gridinsoft Logo
File Icon

The adguardInstaller.exe File Analysis

Updated 6 months ago
Checked by Malware Check
adguardInstaller.exe

Technical Analysis

File Name adguardInstaller.exe
File Type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-22 15:00:31 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
141,744
File Size (bytes)
2025-05-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
30489ccad78861a3783a6ebe0bf2686f
SHA1
b211a23e901affa1cd5821a559acb9a42a1f54ed
SHA256
33f68eb69c2d3c159dbdc6bbff6f9f02d6834627d0f98c965b53edc08894c55b
SHA512
2becf90f2561c00a4e8211981bef99482eb442b1133da82f98c38a1489d20802c3e6bec1e635a5de64df0bd3dde39860fb1453d88bf08dbcfd4adaef826f136c
ImpHash
b26a7e001a4be269742be838dadc9db9

PE Analysis

Basic Information

▼
Icon
Hash: e5d3d066dbe56920351e464a446500f7
Fuzzy: 56580da65dba8c5b3e29288b4cfdc502
dHash: c41345e8b2d4e871
Image Base 0x00400000
Entry Point 0x004014b0
Compilation Time 2022-12-07 14:16:11
Checksum 0x0002b444 (Actual: 0x0002b444)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Digital Signature OK
Imports 11 libraries
Exports 0 functions
Resources 12 Resources
Sections 10 Sections

Version Information

▼
FileDescription AdGuard Web Installer
LegalCopyright (C) 2009-2018 Adguard Software Ltd
ProductName AdGuard Web Installer
ProductVersion 1.0
CompanyName Adguard Software Ltd
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 45,268 bytes 45,568 bytes 6.24 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5CCE674B251F0FF6EB8B7BD87413CF33
.data 0x0000d000 1,188 bytes 1,536 bytes 1.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE ACD6E576C1252BD3B79B7B57315006B7
.rdata 0x0000e000 3,008 bytes 3,072 bytes 5.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 79D1949F2D627C3C1CAD1BDFE41201EC
.eh_fram 0x0000f000 8,112 bytes 8,192 bytes 4.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 923AE17274E756093759304AB472082F
.bss 0x00011000 2,676 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00012000 7,436 bytes 7,680 bytes 5.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7CF265BC970978CF36FFCBE8A9A610DA
.CRT 0x00014000 52 bytes 512 bytes 0.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4EEF9A9546F6BF89752C594CEBB6C33B
.tls 0x00015000 8 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x00016000 62,992 bytes 62,992 bytes 6.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C9110B92017325FDC1122BE880A5D8E3
.reloc 0x00026000 1,964 bytes 2,048 bytes 6.52 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B8CEC5E153B46DF8EB6BE699EE49B81E
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 12 (61,002 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 45,038 bytes
73.8%
RT_RCDATA 4 14,291 bytes
23.4%
RT_GROUP_ICON 1 76 bytes
0.1%
RT_VERSION 1 608 bytes
1%
RT_MANIFEST 1 989 bytes
1.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware