Open
Description
I was sometimes asked questions, why HiJackThis.exe is so huge in size ( ~ 5,6 MB ) compairing to original v2.0.5 (380 KB.)
Firstly, you need to understand that this is 100% reworked code with huge additions, see basic changelog under this spoiler or a complete changelog
Next, v2.0.5 is UPX-ed (packed), Fork - is not.
Today, this question is interested for myself too, so I decided to measure all in details.
Here it is.
Total size:
| Version | Unpacked (no UPX) | 7zip (-mx9) |
|---|---|---|
| v2.0.5 | 1276 KB | 346 KB. |
| v2.8.0.4 | 5683 KB | 1843 KB. |
Size of separate modules of v2.8.0.4 (in KB.):
| Module name | Unpacked exe | 7zip (-mx9) |
|---|---|---|
| Core code and classes* | 1344 | 395 |
| StartupList2 + Microsoft MScomctl.dll | 1124 + 1044 | 230 + 446 |
| Backup & ABR | 408 | 180 |
| Regexp reserve subsystem (PCRE2) | 348 | 179 |
| Translations, ChangeLog, EULA | 444 | 120 |
| Icons, Logo | 148 | 78 |
| WhiteLists | 300 | 66 |
| Main form controls & menu & Other tools | 204 | 50 |
| Digital signature check | 104 | 31 |
| ADS Spy | 52 | 20 |
| ProcMan | 52 | 17 |
| RegKeyUnlocker | 44 | 17 |
| XmlParser | 44 | 15 |
* Core code and classes includes:
- New 'File', 'Hash', 'Process', 'Service', 'Task' and other modules.
- New 'Reg. hive enum', 'Ini file', 'OSInfo', 'Process', 'Registry', 'String Builder' and other classes.
- Code for detection and curing R, F, O sections.
Future updates
Microsoft MScomctl.dll is planned to be replaced by native VB6 code of unicode aware controls.
Replacement weighs ~ + 3992 KB (exe), or + 1049 (7zip),
so HJT size in future builds can be increased up to ~ + 3 MB (exe), or + 0,5 MB (in archive).