Gridinsoft Logo
File Icon

Git.exe Adware Gen Analysis

Updated 2 months ago
Checked by Malware Check
Git.exe

Technical Analysis

File Name Git.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.228.174
Database Version 2025-10-30 21:00:22 UTC
⚠

Adware.Win32.Gen.cld

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
670,208
File Size (bytes)
2025-10-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
091b3e5e969f1f88626f8751bfebe7ff
SHA1
60c4122e42a350e4b2cca1605b708523d923a01d
SHA256
c2b07c264a067b603aa90b9f560456bac2a76dc80c5b386dc3d3428925fb3baa
SHA512
e2a412b1d13d32695cea94fa9b15917f66b7762530a8a10bce9f5f29a7ec75c85d501ea9b3bd6166f70e42c2bfc31762c4154a18ccfca0dc74abba5e2dbabda3
ImpHash
46c801c72e4c5171f5fbde3a2e6e5dbf

PE Analysis

Basic Information

▼
Icon
Hash: 9eac611312d3efc089fa2a2cff5121cd
Fuzzy: 5f09723eaca4dc1e2d2b9afd341609aa
dHash: ba6cf49e9cb890c2
Image Base 0x00400000
Entry Point 0x004129a5
Compilation Time 2021-06-06 04:09:14
Checksum 0x00000000 (Actual: 0x000b0558)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\Users\Benjamin\source\repos\Adv\Git\win\..\Release\Git.pdb
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
Glk, KERNEL32, USER32
Exports 0 functions
Resources 34 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 342,753 bytes 343,040 bytes 6.67 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ EF71A16CA36D20DF1EF3FED290662FA7
.rdata 0x00055000 88,036 bytes 88,064 bytes 6.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 143F441A6057BC01F22515142E0F1ED4
.data 0x0006b000 12,876 bytes 5,632 bytes 4.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 79A447770ACD51E799A63A3A5CE761E2
.00cfg 0x0006f000 8 bytes 512 bytes 0.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4196BEB7B5E0CB6D6C1B12D98803345B
.voltbl 0x00070000 346 bytes 512 bytes 4.87 (Normal) 0x00000000 C155A41F26FF3C00A88400907DD54DFC
.rsrc 0x00071000 215,464 bytes 215,552 bytes 7.27 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 60A7AFD9C0199A6236AAFB949F6A7B55
.reloc 0x000a6000 15,776 bytes 15,872 bytes 6.64 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 222DAD632C88400B72815FF3DD2756B8
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 34 (213,701 bytes)
Resource Type Count Total Size Percentage
RT_ICON 30 212,229 bytes
99.3%
RT_GROUP_ICON 3 438 bytes
0.2%
RT_MANIFEST 1 1,034 bytes
0.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Adware.Win32.Gen.cld Removal

Gridinsoft has the capability to identify and eliminate Adware.Win32.Gen.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware