Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

d586a 3.70%
b953d 3.70%
16396 11.11%
d6e33 3.70%
450fc 3.70%
36823 11.11%
87fd7 7.41%
7e32d 14.81%
ee8d2 7.41%
5e5b1 7.41%
4f3f2 3.70%
da992 3.70%
d1541 3.70%
73331 3.70%
85027 3.70%
b1b81 3.70%
43561 3.70%
(Note, Perion Network Ltd. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RevertToSelf, ImpersonateLoggedOnUser, OpenProcessToken, RegOpenCurrentUser, RegDeleteValueW
kernel32.dll
GetModuleHandleW, WaitForSingleObject, GetCurrentThreadId, GetTickCount, CreateToolhelp32Snapshot, Process32FirstW, OpenProcess, TerminateProcess, Process32NextW, CloseHandle, CreateEventW, ResetEvent, GetCurrentProcess, EncodePointer, HeapSetInformation, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, DecodePointer, GetProcAddress, GetLastError, LoadLibraryW, SetLastError, Sleep, FreeLibrary, IsDebuggerPresent, SetUnhandledExceptionFilter, InterlockedCompareExchange, InterlockedExchange, UnhandledExceptionFilter, EnterCriticalSection, LeaveCriticalSection, GetModuleHandleExW, FindResourceW, LoadResource, SizeofResource, LockResource, DeleteFileW, InitializeCriticalSection, DeleteCriticalSection, SetEvent, TerminateThread, CreateThread, WaitForMultipleObjects, lstrlenA, WriteFile, WideCharToMultiByte, GetFileAttributesW, CreateFileW, MultiByteToWideChar, lstrlenW, lstrcmpiA, CreateDirectoryW, InterlockedDecrement, ReadFile, GetFileAttributesExW, GetModuleFileNameA, InitializeCriticalSectionAndSpinCount, GetProcessHeap, LocalFree, CreateFileA, IsProcessorFeaturePresent, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoCreateInstance, CoInitialize
shell32.dll
ShellExecuteW, SHCreateDirectoryExA, SHGetPathFromIDListW, SHGetFolderLocation, SHGetSpecialFolderLocation
shlwapi.dll
StrCmpIW, StrStrW, PathRemoveFileSpecA
user32.dll
TranslateMessage, MsgWaitForMultipleObjectsEx, DispatchMessageW, UnhookWindowsHookEx, PeekMessageW, PostThreadMessageW, PostMessageW, DefWindowProcW, IsWindow, SetWindowLongW, CreateWindowExA, DestroyWindow
wininet.dll
InternetCloseHandle, InternetReadFileExW, HttpQueryInfoW, HttpSendRequestA, InternetOpenA, HttpOpenRequestA, InternetConnectA, InternetCrackUrlA, InternetSetStatusCallbackW, HttpAddRequestHeadersA

stij.exe

By Perion Network Ltd. (Signed)

Remove stij.exe
MD5:   450fcdc9ff794fc2145126c0ef9e0d71
SHA1:   1dacf3646be6d105c23378827e4b5f2cae529c69
SHA256:   2b3a5d9cc164f66a110268c0c018bbb6ed4ceced386a5c859e10c4079746385b
Warning 4 antivirus scanners has detected malware.

Overview

stij.exe is malware that executes as a process with the local user's privileges typically within the context of its parent dmwu.exe (by Perion Network Ltd). The file is digitally signed by Perion Network Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:stij.exe
Typical file path:C:\Windows\System32\jmdp\stij.exe
Size:15.8 KB (16,176 bytes)
Build date:5/21/2013 7:51 PM
Certificate
Issued to:Perion Network Ltd.
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

MalwareMalware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
Antivirus engineEngine versionDetection
Dr.Web 8.13.9.30 Adware.SweetIM.27
ESET NOD32 7.8859 Win32/SweetIM.D
Malwarebytes 1.75.0.1 PUP.Optional.Sweetim
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V0621

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00505772%
0.028634%
Kernel CPU:0.00215422%
0.013761%
User CPU:0.00290351%
0.014873%
Kernel CPU time:47 ms/min
100,923,805ms/min
Memory
Private memory:1.94 MB
21.59 MB
Private (maximum):5 MB
Private (minimum):4.99 MB
Non-paged memory:1.94 MB
21.59 MB
Virtual memory:52.19 MB
140.96 MB
Virtual memory (peak):52.19 MB
169.69 MB
Working set:5 MB
18.61 MB
Working set (peak):5.06 MB
37.95 MB
Resource allocations
Threads:2
12
Handles:127
600
GUI GDI count:4
103
GUI GDI peak:4
142
GUI USER count:2
49
GUI USER peak:2
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\Windows\System32\jmdp\stij.exe"
Owner:User
Parent process:dmwu.exe (by Perion Network Ltd)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 37.04%
Windows 7 Home Premium 33.33%
Windows 7 Professional 11.11%
Windows Vista Home Premium 7.41%
Windows 8.1 Pro with Media Center 3.70%
Windows 8 3.70%
Windows 8 Pro 3.70%

Distribution by countryDistribution by country

United States installs about 44.44% of stij.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 33.33%
Toshiba 24.24%
Acer 12.12%
ASUS 12.12%
MSI 6.06%
GIGABYTE 6.06%
Dell 6.06%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE