» Adguard.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

Adguard.exe

Adguard for Windows

Performix LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Adguard’.

File name:

Adguard.exe

Publisher:

Performix LLC (signed and verified)

Product:

Adguard for Windows

Version:

6.1.312.1629

MD5:

1a83f3540bc3b60fc321848ea699148d

SHA-1:

85fb51a08cb7886bf1ecfd41cc7deb1466a445b9

SHA-256:

2fd5b4d023cf657122ed058412383a8f28a0db6c8189a4349430edcecfda441b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/24/2024 11:58:12 PM UTC (a few moments ago)

File size:

5.4 MB (5,622,032 bytes)

Product version:

6.1.312.1629

Trademarks:

Original file name:

Adguard.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\adguard\adguard.exe

Digital Signature

Signed by:

Performix LLC

Authority:

DigiCert Inc

Valid from:

8/31/2016 7:00:00 AM

Valid to:

9/4/2019 7:00:00 PM

Subject:

CN=Performix LLC, O=Performix LLC, L=Moscow, S=Moscow, C=RU

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0274DD7B6346BD44F8432CBF991D0383

File PE Metadata

Compilation timestamp:

2/7/2017 4:31:30 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

Entry address:

0x540E5E

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

5.2 MB (5,500,928 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Adguard

Command:

C:\Program Files\adguard\adguard.exe \nosplash

The file Adguard.exe has been discovered within the following program.

uBlock Plus by Essentware

About 2% of users remove it

Scan Adguard.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.