Gridinsoft Logo
File Icon

The astrill-setup-win (3).exe (Astrill Setup) File Analysis

Updated 12 hours ago
Checked by Malaware Check
astrill-setup-win (3).exe

Technical Analysis

File Name astrill-setup-win (3).exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-04 22:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
7,827,232
File Size (bytes)
2025-06-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fd9f5260ec9e75b2329b08a316458095
SHA1
fa5a92939fe79b7a98d5e588afc035576d057302
SHA256
34ab463a7e9589f12346cfcc0e9fb4a77bea6208bbbfc5de7cd525a3b86e9268
SHA512
09f5aa42d611b3e7d80b453266807d432fb77e564c7ea299a9e7024ad46457f80088f22dfc13d010fb6405d9d031f1c68e25dcfbeeb69e46c51e80a28ba66a3b
ImpHash
20dd26497880c05caed9305b3c8b9109

PE Analysis

Basic Information

▼
Icon
Hash: 192ef56320457106255456be5e9e24fc
Fuzzy: 35ac70a2d5fdc635daeaf38ee2fda5fb
dHash: 70d4f0ceccd4f870
Image Base 0x00400000
Entry Point 0x004117dc
Compilation Time 2016-04-06 14:39:04
Checksum 0x00776f99 (Actual: 0x00776f99)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 28 Resources
Sections 8 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName Astrill
FileDescription Astrill Setup
FileVersion 3.9.0.2180
LegalCopyright Copyright © 2009-2020 Astrill
ProductName Astrill
ProductVersion 3.9.0.2180
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 62,020 bytes 62,464 bytes 6.38 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A33E9FF7181115027D121CD377C28C8F
.itext 0x00011000 3,940 bytes 4,096 bytes 5.73 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CAEC456C18277B579A94C9508DAF36EC
.data 0x00012000 3,208 bytes 3,584 bytes 2.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 746954890499546D73DCE0E994642192
.bss 0x00013000 22,204 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,588 bytes 4,096 bytes 4.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E9B9C0328FD9628AD4D6AB8283DCB20E
.tls 0x0001a000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0001b000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFFC444CCC131C9DCEE18DB49EE6403
.rsrc 0x0001c000 196,608 bytes 195,072 bytes 5.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8E8F2A83246FEF979D8BF1E4D7514364

Resource Analysis

▼
Total Resources: 28 (193,400 bytes)
Resource Type Count Total Size Percentage
RT_ICON 15 153,816 bytes
79.5%
RT_STRING 6 2,668 bytes
1.4%
RT_RCDATA 4 33,908 bytes
17.5%
RT_GROUP_ICON 1 160 bytes
0.1%
RT_VERSION 1 1,268 bytes
0.7%
RT_MANIFEST 1 1,580 bytes
0.8%

Certificate Chain Analysis

▼
Certificate Information
Product Astrill
Description Astrill Setup
File Version 3.9.0.2180
Signing Date 05:05 PM 12/12/2020 (1635 days ago)
Verification Status Signed
Signers Astrill Systems Corp.; GlobalSign Extended Validation CodeSigning CA - SHA256 - G3; GlobalSign Root CA - R3
Counter Signers GlobalSign TSA for MS Authenticode - G2; GlobalSign Timestamping CA - G2; GlobalSign Root CA - R1
Copyright Copyright © 2009-2020 Astrill
Certificate Chain Summary
GlobalSign Timestamping CA - G2 #1 Primary
Validity Period: 2011-04-13 10:00:00 → 2028-01-28 12:00:00
Signature Algorithm: sha1RSA
Serial Number: 04 00 00 00 00 01 2F 4E E1 52 D7
GlobalSign TSA for MS Authenticode - G2 #2 Chain
Validity Period: 2016-05-24 00:00:00 → 2027-06-24 00:00:00
Signature Algorithm: sha1RSA
Serial Number: 11 21 D6 99 A7 64 97 3E F1 F8 42 7E E9 19 CC 53 41 14
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 #3 Chain
Validity Period: 2016-06-15 00:00:00 → 2024-06-15 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 48 1B 6A 07 A9 42 4C 1E AA FE F3 CD F1 0F
GlobalSign #4 Chain
Validity Period: 2015-06-04 17:47:53 → 2025-06-04 17:47:53
Signature Algorithm: sha1RSA
Serial Number: 33 00 00 00 3B 6A C0 1E 2B 21 E6 15 DC 00 00 00 00 00 3B
Astrill Systems Corp. #5 Chain
Validity Period: 2019-09-11 15:04:58 → 2022-10-11 15:04:58
Signature Algorithm: sha256RSA
Serial Number: 38 62 0E E7 3E 84 8D 25 91 B7 8A C1
GlobalSign TSA for Advanced - G2 #6 Chain
Validity Period: 2018-02-19 00:00:00 → 2029-03-18 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 0C A7 CF 5D 07 07 24 AC 89 E7 9A 3A
GlobalSign Timestamping CA - SHA256 - G2 #7 Chain
Validity Period: 2011-08-02 10:00:00 → 2029-03-29 10:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 00 00 00 00 01 31 89 C6 50 04

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware