Gridinsoft Logo
File Icon

The gsam.exe (Anti-Malware (64-bit)) File Analysis

Technical Analysis

File Name gsam.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.221.174
Database Version 2025-07-27 01:00:30 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
27,012,608
File Size (bytes)
2025-07-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9297ec972885b815b92fc7fe8897ea82
SHA1
b3a6765358f42c47af07b7c6500c9393c13f62ce
SHA256
fb0fcdc30faf095204008bd4276466def00b439008c7eebe08d4dc4ca89a3a84
SHA512
aa2fee8b12fdfbc423445907441dfca490b28ba123fbb2a923cb92bc8631a7aeffa97fbf76d5763a3a2727d9ff9b03964b00f0f153cf0a3a0f8e0351441d4614
ImpHash
62b96fec5b2aab421d73b23e96c99830

PE Analysis

Basic Information

Icon
Hash: d3dad3e418d61c0671e965ff7b7b56b3
Fuzzy: ae4fce3429c1038e33f8e24d128d6542
dHash: 38f4faf0f0d98638
Image Base 0x00400000
Entry Point 0x012e50a0
Compilation Time 2025-07-08 14:43:42
Checksum 0x019cc088 (Actual: 0x019cc088)
OS Version 5.2
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature OK
Imports 27 libraries
Exports 3 functions
Resources 367 Resources
Sections 11 Sections

Version Information

ProductName Gridinsoft® Anti-Malware
ProductVersion 4.3.64
CompanyName Gridinsoft LLC
LegalCopyright © Gridinsoft LLC, 2025
LegalTrademarks Gridinsoft®
InternalName gsam
OriginalFilename gsam.exe
FileVersion 4.3.64.5856
FileDescription Anti-Malware (64-bit)
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 15,822,884 bytes 15,823,360 bytes 5.72 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9190A79A4213C5F5A6A0CD364C72FFA5
.data 0x00f19000 1,404,264 bytes 1,404,416 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FBC393866D2B40A86328693F318C41F3
.bss 0x01070000 827,064 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0113a000 37,646 bytes 37,888 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 514D27939912F868356800CCF232A0DD
.didata 0x01144000 5,942 bytes 6,144 bytes 3.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 294C2913C47663114DDAAD1EB5FB53B8
.edata 0x01146000 150 bytes 512 bytes 1.95 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 46D083DAB8AA22AF1E3219E2FDEE6DB7
.tls 0x01147000 664 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x01148000 109 bytes 512 bytes 1.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7223A101F35AB3278C931A733E8EF121
.reloc 0x01149000 759,568 bytes 759,808 bytes 6.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E542273A857C1CC92EF2EA8D2078465D
.pdata 0x01203000 800,604 bytes 800,768 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 45C88CE0C5E19D91F44183B52DEA8BE5
.rsrc 0x012c7000 8,167,936 bytes 8,167,936 bytes 7.77 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 09B04D0ADE2E364D374AE3F1AA09C309
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 367 (8,142,254 bytes)
Resource Type Count Total Size Percentage
UNICODEDATA 6 191,535 bytes
2.4%
VCLSTYLE 1 86,732 bytes
1.1%
WAVE 2 498,246 bytes
6.1%
RT_CURSOR 23 11,484 bytes
0.1%
RT_BITMAP 29 11,144 bytes
0.1%
RT_ICON 5 35,585 bytes
0.4%
RT_DIALOG 2 164 bytes
0%
RT_STRING 90 93,140 bytes
1.1%
RT_RCDATA 183 7,211,928 bytes
88.6%
RT_GROUP_CURSOR 23 460 bytes
0%
RT_GROUP_ICON 1 76 bytes
0%
RT_VERSION 1 812 bytes
0%
RT_MANIFEST 1 948 bytes
0%

Certificate Chain Analysis

Certificate Information
Product Gridinsoft® Anti-Malware
Description Anti-Malware (64-bit)
File Version 4.3.64.5856
Original Name gsam.exe
Signing Date 02:44 PM 07/08/2025 (24 days ago)
Verification Status Signed
Signers Gridinsoft TOV; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name gsam
Copyright © Gridinsoft LLC, 2025
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gridinsoft TOV #2 Chain
Validity Period: 2025-03-04 00:00:00 → 2026-03-24 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 73 31 E7 4F 7E 54 4A 22 1B 36 EF 4D B3 54 70
DigiCert Timestamp 2024 #3 Chain
Validity Period: 2024-09-26 00:00:00 → 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware