home

hamachi-2.exe

Hamachi Client

LogMeIn, Inc.

It runs as a windows Service named “LogMeIn Hamachi Tunneling Engine”. This is installed with LogMeIn Hamachi. The file has been seen being downloaded from dl.s11.uloz.to.
Publisher:
LogMeIn Inc.  (signed by LogMeIn, Inc.)

Product:
Hamachi Client

Description:
Hamachi Client Tunneling Engine

Version:
2, 1, 0, 166

MD5:
d483dbaef409e8ab7477c28615fcd853

SHA-1:
eb3ab9ff4ca35eeba08b70946ce425222b7aa637

SHA-256:
daf32b70daeadb26f43fef1e86c8bb1dad81c543c8e67369c0ba7f5be79f812c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:41:31 AM UTC  (today)

File size:
2.2 MB (2,343,816 bytes)

Product version:
2, 0, 0, 0

Copyright:
Copyright (C) LogMeIn Inc. 2004-2011

Original file name:
hamachi-2.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\logmein hamachi\hamachi-2.exe

Digital Signature
Signed by:
LogMeIn, Inc.

Authority:
VeriSign, Inc.

Valid from:
10/5/2009 6:00:00 PM

Valid to:
10/10/2012 5:59:59 PM

Subject:
CN="LogMeIn, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="LogMeIn, Inc.", S=Massachusetts, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
682B2C3CD859F961D9212292A72C208B

File PE Metadata
Compilation timestamp:
2/28/2012 9:38:42 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
49152:XqN9mIT1RzX9E1y3gpfAjjuOZndVIETrzlsSsB:wmqdBuRp

Entry address:
0x13EB60

Entry point:
48, 83, EC, 28, E8, 57, E1, 00, 00, 48, 83, C4, 28, E9, 4E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 4C, 8D, 05, D9, 24, 0D, 00, 33, D2, 49, 8B, C0, 66, 66, 66, 90, 3B, 08, 74, 31, 83, C2, 01, 48, 83, C0, 08, 83, FA, 2D, 72, F0, 8D, 41, ED, 83, F8, 11, 77, 06, B8, 0D, 00, 00, 00, C3, 81, C1, 44, FF, FF, FF, B8, 16, 00, 00, 00, BA, 08, 00, 00, 00, 83, F9, 0E, 0F, 46, C2, C3, 48, 63, C2, 41, 8B, 44, C0, 04, C3, CC, CC, 48, 83, EC, 28, E8, 77, 4C, 00, 00, 48, 85, C0, 75, 0C, 48, 8D...
 
[+]

Entropy:
6.3045

Code size:
1.7 MB (1,735,680 bytes)

Service
Display name:
LogMeIn Hamachi Tunneling Engine

Service name:
Hamachi2Svc

Type:
Win32OwnProcess, InteractiveProcess


The file hamachi-2.exe has been discovered within the following programs.

LogMeIn Hamachi  by LogMeIn, Inc.
LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer.
secure.logmein.com/products/hamachi/download.aspx
About 7% of users remove it
 
Powered by Should I Remove It?

The file hamachi-2.exe has been seen being distributed by the following URL.

http://dl.s11.uloz.to/Ps;Hs;fid=17273098;cid=1742048299;rid=151473763;up=0;uip=78.157.169.198;tm=1336371348;ut=f;aff=uloz.to;cpid=17001;cpui=bXGD;He;ch=48b8888b61d89a15393cad37a2b1cff8;cpnb=17001;cput=bXGD;cptm=;Pe/.../hamachi-2.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.