» HijackThis.exe
Overview
Analysis
File Details
Programs (3)
Downloads (335)

HijackThis.exe

HijackThis

Trend Micro Inc.

File name:

HijackThis.exe

Publisher:

Trend Micro Inc.

Product:

HijackThis

Version:

2.00.0005

MD5:

47811d50390a86a17102d7496e6eabb9

SHA-1:

2623749cdb27887f6746acdee7e8065475f8b541

SHA-256:

9da5a899b9d55e1d43718ec0ad6368f9e9ef0242a4e88cd5ddb2cc6d7bfa5fb3

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

11/27/2024 2:01:23 AM UTC (today)

Scan engine

Detection

Engine version

Rising Antivirus

PE:Trojan.VBInject!1.6546

23.00.65.131218

File size:

379.5 KB (388,608 bytes)

Product version:

2.00.0005

Trademarks:

Original file name:

HijackThis.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

File PE Metadata

Compilation timestamp:

5/10/2013 1:08:08 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:VlTObRvp4MRMEZ40E3pItODKMsFN3pClZQIuScGGSDMpI:jqk44k8DKfFlu3F

Entry address:

0x141920

Entry point:

60, BE, 00, E0, 4F, 00, 8D, BE, 00, 30, F0, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Entropy:

7.3668

Packer / compiler:

UPX 2.90LZMA]

Code size:

272 KB (278,528 bytes)

The file HijackThis.exe has been discovered within the following programs.

HiJackThis by Trend Micro Inc.

HijackThis is an open source enumerating tool for Microsoft Windows originally created by Merijn Bellekom, and later sold to Trend Micro. The program is notable for targeting browser-hijacking methods, rather than relying on a database of known spyware.

www.trendmicro.com

19% remove it

TeamViewer 8 by TeamViewer GmbH

TeamViewer 8 is a proprietary computer software package for remote control, desktop sharing, online meetings, web conferencing and file transfer between computers. It is possible to access a machine running TeamViewer with a web browser.

www.teamviewer.com/en/download/windows.aspx

10% remove it

Types by E. Strunnikov

izt.name/soft/types

About 7% of users remove it

The file HijackThis.exe has been seen being distributed by the following 50 URLs.