Win64/Packed.Themida.JH malicious file

The Win64/Packed.Themida.JH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/Packed.Themida.JH virus can do?

Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Win64/Packed.Themida.JH?


File Info:
crc32: 8D8A7E26
md5: e0fb07a7232a5748456a429c13f94932
name: 4.exe
sha1: 4508e9664d998806d4f797f447f6fc85ebf13daa
sha256: 705ab835a2512972491ffebba89caa5f584cb35be2b26910d7d3f700a2b0dea0
sha512: 0f0f3d2c4400e2c4587ea37ca3a9f459845a3887014be1c88c232794632b4aecc864fb08d40c29d5485c6a1b8d9bac7c5c0d4d7006df4b7bf96bd5f1af6106a7
ssdeep: 49152:HuZNDtLK8WPaos/Ugmgu/z9eAynM4G6vgMAd0jUibEk+9k:H+RxK8WPaosMgm/9eAynM4G6YMAdjC
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/Packed.Themida.JH also known as:

MicroWorld-eScan	Gen:Variant.Razy.561655
FireEye	Generic.mg.e0fb07a7232a5748
Qihoo-360	Generic/Trojan.0f7
McAfee	Artemis!E0FB07A7232A
Cylance	Unsafe
BitDefender	Gen:Variant.Razy.561655
K7GW	Trojan ( 005631ba1 )
Cybereason	malicious.7232a5
Invincea	heuristic
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win64:TrojanX-gen [Trj]
GData	Gen:Variant.Razy.561655
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Packed:Application/Themida.6915a46f
AegisLab	Trojan.Multi.Generic.4!c
Ad-Aware	Gen:Variant.Razy.561655
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win64.Trojan.vc
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Razy.561655 (B)
Ikarus	Trojan.Win64.Themida
Endgame	malicious (high confidence)
Arcabit	Trojan.Razy.D891F7
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
ALYac	Gen:Variant.Razy.561655
MAX	malware (ai score=82)
Malwarebytes	PUP.Optional.Carambis
ESET-NOD32	a variant of Win64/Packed.Themida.JH
TrendMicro-HouseCall	TROJ_GEN.R002H09CS20
Rising	Trojan.Occamy!8.F1CD (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_94%
Fortinet	W32/PossibleThreat
AVG	Win64:TrojanX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Win64/Packed.Themida.JH?

Win64/Packed.Themida.JH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X