» hamachi-2-ui.exe
Overview
Analysis
File Details
Programs (1)
Downloads (1)

hamachi-2-ui.exe

Hamachi Client

LogMeIn, Inc.

This is installed with LogMeIn Hamachi. The file has been seen being downloaded from revpx136.chomikuj.pl.

File name:

hamachi-2-ui.exe

Publisher:

LogMeIn Inc. (signed by LogMeIn, Inc.)

Product:

Hamachi Client

Description:

Hamachi Client Application

Version:

2, 1, 0, 124

MD5:

faa143882ec70760632573f00b76d083

SHA-1:

146b1e6df23d529c32394f2f26415bf4435ce1ad

SHA-256:

66070c52c8b2be31694f54b8cee7ff21702e412e2220e8fd80d7890e8f261085

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/6/2024 8:28:01 AM UTC (today)

File size:

1.9 MB (1,955,208 bytes)

Product version:

2, 0, 0, 0

Original file name:

hamachi-2-ui.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\logmein hamachi\hamachi-2-ui.exe

Digital Signature

Signed by:

LogMeIn, Inc.

Authority:

VeriSign, Inc.

Valid from:

10/5/2009 8:00:00 PM

Valid to:

10/10/2012 7:59:59 PM

Subject:

CN="LogMeIn, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LogMeIn, Inc.", S=Massachusetts, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

682B2C3CD859F961D9212292A72C208B

File PE Metadata

Compilation timestamp:

8/15/2011 10:17:13 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:4OivycOAMOBG3+AjOlJmGmrMVzXTjVQRTWf9CsBnO1EgAY2/kBTwrvT6E:RcmGmrMVLXV99sEgAY2/kBTwrLx

Entry address:

0xA6BE8

Entry point:

E8, 20, 85, 00, 00, E9, 17, FE, FF, FF, 3B, 0D, D0, 56, 54, 00, 75, 02, F3, C3, E9, A0, 85, 00, 00, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, 22, 3A, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 56, 09, 00, 00, 83, C4, 14, 83, C8, FF, EB, 69, 8B, 45, 08, 3B, C3, 74, DC, 56, FF, 75, 14, 89, 45, E8, FF, 75, 10, 89, 45, E0, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, EC, 42, 00, 00, 00, C7, 45, E4, FF, FF, FF, 7F, E8, F5, 87, 00, 00, 83, C4, 10, FF, 4D, E4, 8B, F0, 78, 0A, 8B, 45, E0, 88... 
[+]

Entropy:

6.4619

Code size:

1012 KB (1,036,288 bytes)

The file hamachi-2-ui.exe has been discovered within the following program.

LogMeIn Hamachi by LogMeIn, Inc.

LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer.

secure.logmein.com/products/hamachi/download.aspx

About 7% of users remove it

The file hamachi-2-ui.exe has been seen being distributed by the following URL.

http://revpx136.chomikuj.pl/.../File.aspx?e=JOWBTP7Z9Hnk4M2R6GgV85z0GSTgsaVw6dcVo93WeNstrbTBq3eQVoVShhWf9awjI-G66tB6_WWgcj4hZ2zmSsnd0doTB3oaOEWBg_mXca-ZlxR-sClpgq7eo6FVFa2jNc1ezFkXkQdl8M6JFEfzfA&pv=2

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.