Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

About size of the file 'HiJackThis.exe' #24

Open
dragokas opened this issue Feb 13, 2018 · 0 comments
Open

About size of the file 'HiJackThis.exe' #24

dragokas opened this issue Feb 13, 2018 · 0 comments
Labels

Comments

@dragokas
Copy link
Owner

dragokas commented Feb 13, 2018

I was sometimes asked questions, why HiJackThis.exe is so huge in size ( ~ 5,6 MB ) compairing to original v2.0.5 (380 KB.)

Firstly, you need to understand that this is 100% reworked code with huge additions, see basic changelog under this spoiler or a complete changelog

Next, v2.0.5 is UPX-ed (packed), Fork - is not.

Today, this question is interested for myself too, so I decided to measure all in details.

Here it is.

Total size:

Version Unpacked (no UPX) 7zip (-mx9)
v2.0.5 1276 KB 346 KB.
v2.8.0.4 5683 KB 1843 KB.

Size of separate modules of v2.8.0.4 (in KB.):

Module name Unpacked exe 7zip (-mx9)
Core code and classes* 1344 395
StartupList2 + Microsoft MScomctl.dll 1124 + 1044 230 + 446
Backup & ABR 408 180
Regexp reserve subsystem (PCRE2) 348 179
Translations, ChangeLog, EULA 444 120
Icons, Logo 148 78
WhiteLists 300 66
Main form controls & menu & Other tools 204 50
Digital signature check 104 31
ADS Spy 52 20
ProcMan 52 17
RegKeyUnlocker 44 17
XmlParser 44 15

* Core code and classes includes:

  • New 'File', 'Hash', 'Process', 'Service', 'Task' and other modules.
  • New 'Reg. hive enum', 'Ini file', 'OSInfo', 'Process', 'Registry', 'String Builder' and other classes.
  • Code for detection and curing R, F, O sections.

Future updates

Microsoft MScomctl.dll is planned to be replaced by native VB6 code of unicode aware controls.
Replacement weighs ~ + 3992 KB (exe), or + 1049 (7zip),
so HJT size in future builds can be increased up to ~ + 3 MB (exe), or + 0,5 MB (in archive).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant