Gridinsoft Logo
File Icon

HiBit Uninstaller 3.1.70.exe Malware Generic Analysis

Updated 11 days ago
Checked by Malaware Check
HiBit Uninstaller 3.1.70.exe

Technical Analysis

File Name HiBit Uninstaller 3.1.70.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-26 21:00:15 UTC
⚠

Malware.Win32.Generic.cld

Malware family: Generic

This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
4,618,752
File Size (bytes)
2025-05-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
e53855e0e29700f8fb310a49d402ba4d
SHA1
6921378bd8943751e31b7589e82d9243abf16422
SHA256
f9c186e7716a30db620f429a3b0388af9faa0591beddb9f188f71ea4f3213da6
SHA512
7af0edd483f9b5dcdf301f258200bd9aed588c1c3f8dc35f78bbac1d870eeee753f70c6ae3651bcd03ba833d7c148f572dfcd2f4d4b7b99501a6edfb9e6d0bc0
ImpHash
279daa640d9140f9842860a738abd363

PE Analysis

Basic Information

▼
Icon
Hash: 92a3cb4b31ca04b4d87ad6b62c6f835a
Fuzzy: 607f50f8f5e967898dfc217d961b29f7
dHash: aa2b756969696bb6
Image Base 0x00400000
Entry Point 0x00420577
Compilation Time 2023-10-27 05:27:16
Checksum 0x0046cf99 (Actual: 0x0046d72b)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 18 libraries
Exports 0 functions
Resources 29 Resources
Sections 5 Sections

Version Information

▼
FileVersion 3.1.70
Comments SolidShare.Net Unattended Installer
FileDescription SolidShare.Net Unattended Installer
ProductVersion 3.1.70
LegalCopyright © 2023 By KiNGHaZe
CompanyName SolidShare TEAM
ProductName HiBit Uninstaller
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 633,629 bytes 633,856 bytes 6.67 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0A1473F3064DCBC32EF93C5C8A90F3A6
.rdata 0x0009c000 195,458 bytes 195,584 bytes 5.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C9CF2468B60BF4F80F136ED54B3989FB
.data 0x000cc000 28,780 bytes 18,432 bytes 0.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 53B9025D545D65E23295E30AFDBD16D9
.rsrc 0x000d4000 3,739,632 bytes 3,739,648 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D920DA0ACB4364AC8D912D6076BCD29B
.reloc 0x00465000 30,100 bytes 30,208 bytes 6.80 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C68EE8931A32D45EB82DC450EE40EFC3
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 29 (3,738,001 bytes)
Resource Type Count Total Size Percentage
RT_ICON 13 191,201 bytes
5.1%
RT_MENU 1 80 bytes
0%
RT_DIALOG 1 252 bytes
0%
RT_STRING 7 8,900 bytes
0.2%
RT_RCDATA 1 3,534,945 bytes
94.6%
RT_GROUP_ICON 4 206 bytes
0%
RT_VERSION 1 788 bytes
0%
RT_MANIFEST 1 1,629 bytes
0%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.Generic.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Generic.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware