Gridinsoft Logo
File Icon

HITMAN 3 v3.10-v3.160 Plus 13 Trainer.exe Rootkit Gen Analysis

Updated 0 seconds ago
Checked by Malware Check
HITMAN 3 v3.10-v3.160 Plus 13 Trainer.exe

Technical Analysis

File Name HITMAN 3 v3.10-v3.160 Plus 13 Trainer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-16 18:00:26 UTC
⚠

Rootkit.Win64.Gen.bot

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
1,274,368
File Size (bytes)
2025-07-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3a6da0bdd054d3f1bb0f4667c00dbf77
SHA1
888a1e905691c8b2b3b4daf556469be493fb10fb
SHA256
446e83f044b6319c85d16ace8fc63537a0d8b541658a90dae375756495535003
SHA512
1a384a49b4b5a81f8cf559bb476c57a3f7b73250eb86c625bffaa32a0cd679480076c9aaa49209fa73c79db1bf199724078763c1ecb05e7045911453c57f070a
ImpHash
846ce39cddd11fb3e7c4b19ac27aa6c2

PE Analysis

Basic Information

▼
Icon
Hash: 5b5c69756305e5b7bcc03412fe64a17c
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e2eaaf0
Image Base 0x140000000
Entry Point 0x1400302c4
Compilation Time 2023-08-20 12:49:44
Checksum 0x00000000 (Actual: 0x0013f401)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 10 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports 0 functions
Resources 17 Resources
Sections 7 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription HITMAN 3 v3.10-v3.160 Plus 13 Trainer
FileVersion 1.0.0.1
InternalName HITMAN 3 v3.10-v3.160 Plus 13 Trainer
LegalCopyright FLiNG Copyright (C) 2023
OriginalFilename HITMAN 3 v3.10-v3.160 Plus 13 Trainer.exe
ProductName HITMAN 3 v3.10-v3.160 Plus 13 Trainer
ProductVersion 1.0.840.2
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 350,284 bytes 350,720 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1A8A4EB429703A566FB31B84382B7CC3
.rdata 0x00057000 110,856 bytes 111,104 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 72EDEEC0F2EB923A19F3FB0E5F9EF883
.data 0x00073000 14,636 bytes 6,144 bytes 3.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FF6A20CD05BF6DE9132AFCBD38FD0E17
.pdata 0x00077000 16,200 bytes 16,384 bytes 5.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 08674889C14CFFAB8C29432E317EDD52
_RDATA 0x0007b000 348 bytes 512 bytes 3.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 492B5E312CC5BAF2D83D03F664108A71
.rsrc 0x0007c000 785,144 bytes 785,408 bytes 7.12 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 39380C336F2A7E9E084C40DF86C03818
.reloc 0x0013c000 2,768 bytes 3,072 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1D7179F734EE8F1A20F93190604477B5
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 17 (784,043 bytes)
Resource Type Count Total Size Percentage
COVER 1 43,630 bytes
5.6%
REMOTE 2 308,228 bytes
39.3%
UI 1 192,000 bytes
24.5%
WAVE 2 22,222 bytes
2.8%
RT_ICON 8 216,276 bytes
27.6%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 916 bytes
0.1%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Rootkit.Win64.Gen.bot Removal

Gridinsoft has the capability to identify and eliminate Rootkit.Win64.Gen.bot without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware