home

hackmon.exe

UnHackMe

Greatis Software LLC

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in.
Publisher:
Greatis Software  (signed by Greatis Software LLC)

Product:
UnHackMe

Description:
Detects Rootkits in background

Version:
5.9.5.398

MD5:
07c70186f755850848aafb771a68ead3

SHA-1:
75b45f9078d2f1c735e9de830b4fbaa4c26017cb

SHA-256:
857ed97a99a588f32e4e99721501d00286d6541050a0f169844c38d730aa5561

Scanner detections:
14 / 68

Status:
Clean  (14 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/10/2024 11:18:33 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.Floxif.A
359

avast!
Win32:Pioneer-C
2014.9-160211

AVG
Win32/Floxif.A
2017.0.2837

Dr.Web
Win32.FloodFix.7
9.0.1.042

Emsisoft Anti-Malware
Win32.Floxif
8.16.02.11.05

ESET NOD32
Win32/Floxif.H virus
10.7.0.302.0

F-Prot
W32/Floxif.B
v6.4.6.5.141

F-Secure
Win32.Floxif.A
11.2016-11-02_5

Kaspersky
Virus.Win32.Pioneer
14.0.0.679

McAfee
Trojan.Dropper-FIY!0CE5BCA0F9E8
5600.6493

Microsoft Security Essentials
Threat.Undefined
1.213.2982.0

Norman
Win32.Floxif.A
11.20160211

Sophos
Virus 'W32/Floxif-C'
5.22

VIPRE Antivirus
Threat.4760052
46446

File size:
581.3 KB (595,216 bytes)

Product version:
5.9

Copyright:
Greatis Software

Trademarks:
UnHackMe

Original file name:
hackmon.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\unhackme\hackmon.exe

Digital Signature
Signed by:
Greatis Software LLC

Authority:
The USERTRUST Network

Valid from:
6/1/2011 11:00:00 PM

Valid to:
6/1/2016 10:59:59 PM

Subject:
CN=Greatis Software LLC, O=Greatis Software LLC, STREET=Turgeneva 1-65, L=Yaroslavl, S=Yaroslavl, PostalCode=150054, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
575425920A0FA110B23C10FD669FAE85

File PE Metadata
Compilation timestamp:
4/20/2012 11:06:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:yGadBRfUVtLOL5rvEHKBI3giFHc7bjcq9j9pl7YJAkzv:SHrt2KEFGv9j9yJ

Entry address:
0x1000

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, D0, 63, 47, 00, A1, C3, 63, 47, 00, C1, E0, 02, A3, C7, 63, 47, 00, 52, 6A, 00, E8, CB, 3B, 07, 00, 8B, D0, E8, 86, 91, 06, 00, 5A, E8, E4, 90, 06, 00, E8, BB, 91, 06, 00, 6A, 00, E8, D8, A3, 06, 00, 59, 68, 6C, 63, 47, 00, 6A, 00, E8, A5, 3B, 07, 00, A3, CB, 63, 47, 00, 6A, 00, E9, 8B, F4, 06, 00, E9, 06, A4, 06, 00, 33, C0, A0, B5, 63, 47, 00, C3, A1, CB, 63, 47, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
468 KB (479,232 bytes)

Scheduled Task
Task name:
UnHackMe Task Scheduler

Trigger:
Logon (Runs on logon)

Description:
Part of RegRun Suite/UnHackMe software. http://www.greatis.com


Scan hackmon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.