Gridinsoft Logo
File Icon

The HiSuiteDownLoader.exe (HiSuiteDownLoader Application) File Analysis

Updated 5 months ago
Checked by Malware Check
HiSuiteDownLoader.exe

Technical Analysis

File Name HiSuiteDownLoader.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.202.174
Database Version 2025-01-05 11:00:32 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
2,859,840
File Size (bytes)
2025-01-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
eac0c522db042eaa0a7d2d3452534e5f
SHA1
f21975ca5d5f1042eec67df73281d545e21867d6
SHA256
57c82aa014e11e6fb795da9168db4523c1ff8aa4f94b76c5c10102552d598df4
SHA512
079eed6cf1dc122bb98299bfed871a767b92b9e0fcf6f83878ec84caf3658e85de40e09714e61520e3c2981770f769cee702b7f250c402c968f2907960bf511c
ImpHash
ffdd3539d89d186d52fc3a5fff369af0

PE Analysis

Basic Information

▼
Icon
Hash: 794efa8a3ba022675f19c77aafdf361e
Fuzzy: 37a061a87080da2c4ba0737bab00f526
dHash: 71dcbc8cc8f8f871
Image Base 0x00400000
Entry Point 0x004719ca
Compilation Time 2021-04-23 08:36:13
Checksum 0x002c4905 (Actual: 0x002c4905)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\HISUITE_EMUI\202114191135\windows\tools\HiSuiteDownLoader\Release\HiSuiteDownLoader.pdb
Digital Signature Chain verification from CN=Huawei Technologies Co.\, Ltd., O=Huawei Technologies Co.\, Ltd., L=Shenzhen, ST=Guangdong, C=CN (serial:93150918405858403119876268083733562505, sha1:878ce7c28c8079f0117f65fa5a7742ad017eab9d) failed: The path could not be validated because intermediate certificate 1 expired 2023-12-09 23:59:59Z
Imports 17 libraries
Exports 0 functions
Resources 69 Resources
Sections 5 Sections

Version Information

▼
FileDescription HiSuiteDownLoader Application
FileVersion 1.0.3.9
InternalName HiSuiteDownLoader
LegalCopyright Copyright (C) 2021
OriginalFilename HiSuiteDownLoader.EXE
ProductName HiSuiteDownLoader Application
ProductVersion 1.0.3.9
Translation 0x0804 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,005,842 bytes 1,006,080 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E8DECA7434B849F96A92D2020B2D671C
.rdata 0x000f7000 247,282 bytes 247,296 bytes 5.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 04402AD7473EE968ACB2CF40D9F3B1FE
.data 0x00134000 31,880 bytes 17,408 bytes 4.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BE6AF8402D03DE4F7BAA0883C242FDFC
.rsrc 0x0013c000 1,521,408 bytes 1,521,664 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 47886547CF07359BAFC550715ED05276
.reloc 0x002b0000 62,852 bytes 62,976 bytes 6.65 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 350CAF0A5AD09E3787D672C08666FA40
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 69 (1,517,569 bytes)
Resource Type Count Total Size Percentage
PNG 6 126,991 bytes
8.4%
ZIP 1 1,349,958 bytes
89%
RT_CURSOR 16 4,800 bytes
0.3%
RT_BITMAP 2 508 bytes
0%
RT_ICON 10 25,552 bytes
1.7%
RT_DIALOG 3 1,186 bytes
0.1%
RT_STRING 13 6,826 bytes
0.4%
RT_GROUP_CURSOR 15 314 bytes
0%
RT_GROUP_ICON 1 146 bytes
0%
RT_VERSION 1 740 bytes
0%
RT_MANIFEST 1 548 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product HiSuiteDownLoader Application
Description HiSuiteDownLoader Application
File Version 1.0.3.9
Original Name HiSuiteDownLoader.EXE
Verification Status A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Signers Huawei Technologies Co., Ltd.; Symantec Class 3 SHA256 Code Signing CA; VeriSign
Internal Name HiSuiteDownLoader
Copyright Copyright (C) 2021
Certificate Chain Summary
Huawei Technologies Co., Ltd. #1 Primary
Validity Period: 2019-03-12 00:00:00 → 2022-03-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 46 14 36 DD 0D 93 0D D9 3F 21 98 A4 5A 4F 84 89
Symantec Class 3 SHA256 Code Signing CA #2 Chain
Validity Period: 2013-12-10 00:00:00 → 2023-12-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 3D 78 D7 F9 76 49 60 B2 61 7D F4 F0 1E CA 86 2A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

Chain verification from CN=Huawei Technologies Co.\, Ltd., O=Huawei Technologies Co.\, Ltd., L=Shenzhen, ST=Guangdong, C=CN (serial:93150918405858403119876268083733562505, sha1:878ce7c28c8079f0117f65fa5a7742ad017eab9d) failed: The path could not be validated because intermediate certificate 1 expired 2023-12-09 23:59:59Z

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware