Gridinsoft Logo

The ngrok.exe File Analysis

Updated 5 months ago
Checked by Malware Check
ngrok.exe

Technical Analysis

File Name ngrok.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.207.174
Database Version 2025-02-16 08:00:40 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
48,224,480
File Size (bytes)
2025-02-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0619675064f3e338f4c432e4fa7fdc07
SHA1
ecd21316d9068108e9a82caff162dd222cdf9150
SHA256
6ce6ad1d80903c4d785abd8d0d17d782579ff0aa7f3c9046dad356e12069de53
SHA512
930568e23e14a439529aa70e174359c76637f6a07622b4e242e555d52139ee721ce22aef35d47ebc5956a8b6396b65a910feeae8a474c296103fd8ec33f9b1dc
ImpHash
b196866f0bf37f1f128fa153413b744f

PE Analysis

Basic Information

▼
Image Base 0x00400000
Entry Point 0x0047fb80
Compilation Time 1970-01-01 00:00:00
Checksum 0x02e08a31 (Actual: 0x02e08a31)
OS Version 6.1
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature Chain verification from [email protected], CN=Ngrok\, Inc., O=Ngrok\, Inc., L=San Diego, ST=California, C=US (serial:10936332555649019308070740469481071607, sha1:7a54eb0d199484eb8caea931c90a744bcf02a7e0) failed: Unable to build a validation path for the certificate "Email Address: [email protected]; Common Name: Ngrok, Inc.; Organization: Ngrok, Inc.; Locality: San Diego; State/Province: California; Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found
Imports 1 libraries
kernel32
Exports 0 functions
Resources 1 Resources
Sections 9 Sections

Version Information

▼
FileDescription The ngrok agent gets you online in one line.
ProductName ngrok agent
ProductVersion 3.19.1
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 21,467,968 bytes 21,468,160 bytes 6.17 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B10C2BAA247E20225DB9466A4F488BD7
.rdata 0x0147b000 24,723,512 bytes 24,723,968 bytes 5.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8ABF1D7DBE331DF36E817DB8F7D64328
.data 0x02c10000 1,554,928 bytes 1,121,280 bytes 4.60 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AF239678BD8A6DEB69F06383B7453342
.pdata 0x02d8c000 561,948 bytes 562,176 bytes 6.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 43FF504127990719EA2758001D1B1B46
.xdata 0x02e16000 180 bytes 512 bytes 1.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FAB07EF061E5E0E8189FC8E990A66CF1
.idata 0x02e17000 1,402 bytes 1,536 bytes 4.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C6DCF6D42E2B0EFCDE6E47577179907D
.reloc 0x02e18000 335,260 bytes 335,360 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C291ECFC674CA36251FA1F528D1AD824
.symtab 0x02e6a000 4 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07B5472D347D42780469FB2654B7FC54
.rsrc 0x02e6b000 552 bytes 1,024 bytes 1.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6AB0888E850D879FA38696D68964D915

Resource Analysis

▼
Total Resources: 1 (460 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 460 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

Chain verification from [email protected], CN=Ngrok\, Inc., O=Ngrok\, Inc., L=San Diego, ST=California, C=US (serial:10936332555649019308070740469481071607, sha1:7a54eb0d199484eb8caea931c90a744bcf02a7e0) failed: Unable to build a validation path for the certificate "Email Address: [email protected]; Common Name: Ngrok, Inc.; Organization: Ngrok, Inc.; Locality: San Diego; State/Province: California; Country: US" - no issuer matching "Common Name: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; Organization: DigiCert, Inc.; Country: US" was found

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware