home

hijackthis204.exe

MD5:
f20338c1e2fbb12888f4c48ba7024e61

SHA-1:
ee4233263281ffa7d9aa6ee350b38f7f009e7b7f

SHA-256:
8d1cfca27e8e5a71f458a202ed363fcd90232614940ef2f4d803f236d45d47ec

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
6/17/2024 2:41:22 PM UTC  (today)

Scan engine
Detection
Engine version

K7 AntiVirus
Trojan
13.204.16037

Sophos
Virus 'Mal/HckPk-A'
5.14

Trend Micro House Call
Suspicious_GEN.F47V0526
7.2.168

File size:
377.2 KB (386,277 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hijackthis204.exe

File PE Metadata
Compilation timestamp:
4/12/2010 8:50:51 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:XkgNLEhtwPszyJNUFIuBgjV3b/ItgODuoPh4X464yv2jyE808x2LmLbwsuScGGS5:7wt8BURgxr/V+phmdE808YKXF

Entry address:
0x141850

Entry point:
AC, F1, 65, A9, FB, 55, 9A, EF, 5B, 9C, F1, 73, B1, F4, 51, 80, D6, 00, 00, A5, 00, 00, AB, 00, 00, B0, 00, 00, B6, 00, 00, CA, 2D, 2D, A6, 00, 00, 00, 00, 00, 00, 00, 00, 00, 96, 96, 96, F5, F5, F5, FF, FF, FF, FD, FD, FD, FA, FA, FA, FD, FD, FD, FF, FF, FF, FF, FF, FF, FF, FF, FF, 66, 66, E2, 00, 00, B9, 02, 02, B3, 03, 03, B6, 01, 01, C4, 00, 00, D7, 03, 02, A3, 78, 78, 8F, 79, 96, B5, 60, 96, D5, 70, B0, F7, 73, B0, F2, 3B, 66, D0, 07, 11, B7, 00, 00, B5, 00, 00, B9, 00, 00, BC, 00, 00, C1, 00, 00, D5...
 
[+]

Code size:
272 KB (278,528 bytes)

Scan hijackthis204.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.