Gridinsoft Logo
File Icon

The psiphon3.exe File Analysis

Updated 22 hours ago
Checked by Malware Check
psiphon3.exe

Technical Analysis

File Name psiphon3.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.218.174
Database Version 2025-06-17 14:00:23 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
10,405,136
File Size (bytes)
2025-06-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
41b7f0822591f5d1c21b83d8b2c71192
SHA1
e894a744520c2accde2fc0f264e96a4e62e703b2
SHA256
a1c682275a73a91a6df0dd2b195cb12c877a5f45ddb94abd4a7790165d680b68
SHA512
472f3c2d41584d36107e20d52bf0b1599336fce86eb6c22d90e2a4314441ad8d6d482f4aa74a0dc6679f7bf4a09c8704db4ad5df19f3ceb759b10770deeb3f03
ImpHash
097a53de9532d3605d91ff5bc1276e25

PE Analysis

Basic Information

▼
Icon
Hash: 6a690ecfde02b5ffdddfc8824b22426f
Fuzzy: 7b651678d64eec4ed80535dc0f2469b6
dHash: e8e0dbdb49e988e0
Image Base 0x00400000
Entry Point 0x021b2fc0
Compilation Time 2025-06-15 17:52:40
Checksum 0x009f024e (Actual: 0x009f024e)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 54 Resources
Sections 3 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 20,844,544 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x013e2000 10,305,536 bytes 10,304,000 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 35C8D28BB3B1CE7504FF2E968D1CB494
.rsrc 0x01db6000 90,112 bytes 90,112 bytes 7.48 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6EDF73183969297ABFF5D79CC0F12276
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 54 (29,043,618 bytes)
Resource Type Count Total Size Percentage
RT_ICON 30 251,739 bytes
0.9%
RT_STRING 1 66 bytes
0%
RT_RCDATA 3 25,520,444 bytes
87.9%
RT_GROUP_ICON 3 438 bytes
0%
RT_HTML 16 3,270,149 bytes
11.3%
RT_MANIFEST 1 782 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 05:53 PM 06/15/2025 (2 days ago)
Verification Status Signed
Signers Psiphon Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
Psiphon Inc. #4 Chain
Validity Period: 2023-05-02 00:00:00 → 2026-07-28 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 5F CA 85 F0 00 B8 6E 0C 0F AB AB AA 85 A2 8F
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #5 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware