home

aim.exe

AIM for Windows

AOL Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘AIM for Windows’. This file is installed with the program AIM for Windows.
Publisher:
AOL Inc.  (signed and verified)

Product:
AIM for Windows

Version:
8.0.7.1

MD5:
b9829ee922823f86d556564e6654d4e9

SHA-1:
db4c03f963d507fe03ada3fc9fdfc75ba85e7123

SHA-256:
4cb956c21b0cc0d15c1dba8cd359208928afcd2ced09b29566615e0bd3f4ffd6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 7:09:16 AM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Android.Trojan.FakeInst.DX
8.14.04.02.12

File size:
1 MB (1,075,144 bytes)

Product version:
8.0.7.1

Copyright:
Copyright 2013 AOL Inc. All Rights Reserved.

Original file name:
aim.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\aol\aim\aim.exe

Digital Signature
Signed by:
AOL Inc.

Authority:
Entrust, Inc.

Valid from:
1/21/2014 3:33:54 PM

Valid to:
1/18/2017 1:46:48 AM

Subject:
CN=AOL Inc., OU=AIM, O=AOL Inc., L=New York, S=New York, C=US

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C1768C9

File PE Metadata
Compilation timestamp:
2/4/2014 10:46:17 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:13DNJtuo3Da4bx1fTh+W3cWJYW2cPvKqhNwTRbGGxJ0BJ:9N3uo3Dak7r9UcPvphNwTRCBJ

Entry address:
0xA2668

Entry point:
E8, 8A, 9F, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 0B, 03, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 57, 33, FF, 3B, F7, 75, 04, 33, C0, EB, 65, 39, 7D, 08, 75, 1B, E8, 18, 60, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 9D, 02, 00, 00, 83, C4, 14, 8B, C6, EB, 45, 39, 7D, 10, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, D9, 1D, 00, 00, 83, C4, 0C, EB, C1, FF, 75, 0C, 57, FF, 75, 08, E8, 48, 03, 00, 00, 83, C4, 0C, 39, 7D, 10, 74, B6, 39, 75, 0C, 73, 0E, E8, C9, 5F...
 
[+]

Code size:
776 KB (794,624 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AIM for Windows

Command:
"C:\users\{user}\appdata\local\aol\aim\aim.exe"


The file aim.exe has been discovered within the following program.

AIM for Windows  by AOL Inc.
AIM for Windows is an instant messaging and presence computer program which uses the proprietary OSCAR instant messaging protocol and the TOC protocol to allow registered users to communicate in real time.
www.aim.com/download#windows
6% remove it
 
Powered by Should I Remove It?

Scan aim.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.