Gridinsoft Logo
File Icon

The psiphon3.exe File Analysis

Updated 1 day ago
Checked by Malware Check
psiphon3.exe

Technical Analysis

File Name psiphon3.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.218.174
Database Version 2025-06-22 13:00:28 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
10,406,672
File Size (bytes)
2025-06-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7d30d97e1d20b8ff2d2efb526f19302f
SHA1
28447e02cf808df6cdd9697a96d767872de3058f
SHA256
ac9c6046505f296edc81ce3e9a82fae5b4f6ce5be6af6a5687af910768b2db8e
SHA512
d3f40f9e4313404973a0ab41d4155ba6ccfa801cd17a9b5b79d0b7f9128fadfc9b38c5b8e8ee912fb7a8dcb267c4d80445cad7f8155cc929d98f5c6a78acfb1f
ImpHash
097a53de9532d3605d91ff5bc1276e25

PE Analysis

Basic Information

▼
Icon
Hash: 6a690ecfde02b5ffdddfc8824b22426f
Fuzzy: 7b651678d64eec4ed80535dc0f2469b6
dHash: e8e0dbdb49e988e0
Image Base 0x00400000
Entry Point 0x021b34a0
Compilation Time 2025-06-19 11:59:22
Checksum 0x009f728a (Actual: 0x009f728a)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 54 Resources
Sections 3 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 20,844,544 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x013e2000 10,305,536 bytes 10,305,536 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DCDFD94043E4CB3564303FA8BDB7F5B2
.rsrc 0x01db6000 90,112 bytes 90,112 bytes 7.48 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 16EECD1D987B78F8769781E608A74C3F
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 54 (29,043,618 bytes)
Resource Type Count Total Size Percentage
RT_ICON 30 251,739 bytes
0.9%
RT_STRING 1 66 bytes
0%
RT_RCDATA 3 25,520,444 bytes
87.9%
RT_GROUP_ICON 3 438 bytes
0%
RT_HTML 16 3,270,149 bytes
11.3%
RT_MANIFEST 1 782 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 11:59 AM 06/19/2025 (4 days ago)
Verification Status Signed
Signers Psiphon Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
Psiphon Inc. #4 Chain
Validity Period: 2023-05-02 00:00:00 → 2026-07-28 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 5F CA 85 F0 00 B8 6E 0C 0F AB AB AA 85 A2 8F
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #5 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware