home

uninstall_hidden-in-plain-sight-installer.exe

Hidden in Plain Sight Uninstaller

IndieCity Limited

The executable uninstall_hidden-in-plain-sight-installer.exe has been detected as malware by 2 anti-virus scanners. The program is a setup application that uses the Nullsoft Install System installer. This is the uninstaller utility registered in the Windows Control Panel for the program Hidden in Plain Sight by Adam Spragg Games. This file is typically installed with the program IndieCity Client by IndieCity Ltd.
Publisher:
IndieCity Ltd  (signed by IndieCity Limited)

Product:
Hidden in Plain Sight Uninstaller

Version:
1.0.0.6

MD5:
14410d3ec9333e0e2af437e8102b2ef8

SHA-1:
30e0f5db6bb83c23fbcf0a7f68025a53fc5ca5a2

SHA-256:
38a2a2f7cf96b39fe6412de6f7cbc04afdf35cba3859c3e57f7822a58c0b25b4

Scanner detections:
2 / 68

Status:
Malware

Analysis date:
7/16/2025 1:44:17 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Detection.Undefined
9.0.1.05190

Reason Heuristics
Threat.Win.Reputation.IMP
16.12.5.9

File size:
194.8 KB (199,520 bytes)

Copyright:
IndieCity Ltd

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Language:
English (United States)

Common path:
C:\Program Files\indiecity\client\installedgames\{f330e7ad-e2f9-41df-80d1-bc05e189693b}\uninstall_hidden-in-plain-sight-installer.exe

Digital Signature
Signed by:
IndieCity Limited

Authority:
GoDaddy.com, Inc.

Valid from:
6/11/2012 1:29:32 PM

Valid to:
6/14/2013 3:49:55 PM

Subject:
CN=IndieCity Limited, O=IndieCity Limited, L=Leamington Spa, S=Warwickshire, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
042701DD05A6F9

File PE Metadata
Compilation timestamp:
5/15/2010 9:38:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
3072:IIgv3rilU9S3BJrSRwiWUv6lqzDCH+ONwukkkB+AfqWiSmDwH9uiWN:IRb63GVClqzDu+ON47PCWiSP+N

Entry address:
0x3E3F

Entry point:
55, 89, E5, 57, 56, 53, 81, EC, AC, 01, 00, 00, E8, 30, 59, 00, 00, C7, 04, 24, 01, 80, 00, 00, E8, D4, 55, 00, 00, 53, C7, 04, 24, 00, 00, 00, 00, E8, 3F, 59, 00, 00, A3, 04, 08, 43, 00, 51, C7, 04, 24, 08, 00, 00, 00, E8, 27, 32, 00, 00, A3, B4, 08, 43, 00, 8D, 85, 84, FE, FF, FF, 52, C7, 44, 24, 10, 00, 00, 00, 00, C7, 44, 24, 0C, 60, 01, 00, 00, 89, 44, 24, 08, C7, 44, 24, 04, 00, 00, 00, 00, C7, 04, 24, 4C, B2, 40, 00, E8, 69, 58, 00, 00, 83, EC, 14, C7, 44, 24, 04, 4D, B2, 40, 00, C7, 04, 24, E4, 08...
 
[+]

Code size:
34 KB (34,816 bytes)

Program Uninstaller
Program name:
Hidden in Plain Sight

Display publisher:
Adam Spragg Games

Uninstall string:
"C:\Program Files\IndieCity\Client\InstalledGames\{f330e7ad-e2f9-41df-80d1-bc05e189693b}\Uninstall_hidden-in-plain-sight-installer.exe"


The file uninstall_hidden-in-plain-sight-installer.exe has been discovered within the following program.

IndieCity Client  by IndieCity Ltd
About 9% of users remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.