Gridinsoft Logo
File Icon

The psiphon3.exe File Analysis

Updated 1 day ago
Checked by Malware Check
psiphon3.exe

Technical Analysis

File Name psiphon3.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Scanner Version 1.0.218.174
Database Version 2025-06-13 09:00:19 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
10,408,208
File Size (bytes)
2025-06-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
77e7d53a45e65e673738a5573ebe6fe2
SHA1
14e7936e8fd254e2ba5c6f38f718934f1303fd62
SHA256
ca1ac3a4584a0f681d195a0be340409218f5affb993f64415d39e537f05b1739
SHA512
26a928e8e3a76ad7fa52f2c462a7dd321400c70d42459aba11a63cb5a84320a071b6c5fa1bf1fecfa73b625075639a2db729d8e1c5167c22e197a3c60d0d6bcd
ImpHash
097a53de9532d3605d91ff5bc1276e25

PE Analysis

Basic Information

▼
Icon
Hash: 6a690ecfde02b5ffdddfc8824b22426f
Fuzzy: 7b651678d64eec4ed80535dc0f2469b6
dHash: e8e0dbdb49e988e0
Image Base 0x00400000
Entry Point 0x021b6b60
Compilation Time 2025-06-11 05:16:56
Checksum 0x009f46d8 (Actual: 0x009f46d8)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 54 Resources
Sections 3 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 20,856,832 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x013e5000 10,309,632 bytes 10,307,072 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C2FC885F2C2312DB850B86222B3F9753
.rsrc 0x01dba000 90,112 bytes 90,112 bytes 7.48 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 31E7E6EEC185BE8B1083BF3FD8A94A99
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 54 (29,043,618 bytes)
Resource Type Count Total Size Percentage
RT_ICON 30 251,739 bytes
0.9%
RT_STRING 1 66 bytes
0%
RT_RCDATA 3 25,520,444 bytes
87.9%
RT_GROUP_ICON 3 438 bytes
0%
RT_HTML 16 3,270,149 bytes
11.3%
RT_MANIFEST 1 782 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Signing Date 05:17 AM 06/11/2025 (3 days ago)
Verification Status Signed
Signers Psiphon Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #3 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
Psiphon Inc. #4 Chain
Validity Period: 2023-05-02 00:00:00 → 2026-07-28 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 5F CA 85 F0 00 B8 6E 0C 0F AB AB AA 85 A2 8F
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #5 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware