home

2014-03-13_jscss.1395216042.exe

ZOL天空软件安装器

博恩斯科技发展有限公司

Publisher:
天空软件  (signed by 博恩斯科技发展有限公司)

Product:
ZOL天空软件安装器

Description:
天空软件安装器

Version:
1.0.0.2

MD5:

SHA-1:
43446cd08a8a44f1711ebcf1c6d163f88d0e27f0

SHA-256:
adac0479998d7074a5b72d4762a84744657be420b454b8c8f7a8fab06a2916ac

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 7:31:54 AM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
Troj.W32.Gen
2.1.4+

File size:
1.8 MB (1,837,352 bytes)

Product version:
1.0.0.2

Copyright:
天空软件 保留所有权利。

Original file name:
SKYCNInst

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\2014-03-13_jscss.1395216042.exe

Digital Signature
Signed by:
博恩斯科技发展有限公司

Authority:
WoSign CA Limited

Valid from:
3/10/2014 4:30:01 PM

Valid to:
3/10/2015 4:30:01 PM

Subject:
CN=博恩斯科技发展有限公司, E=contact@ommoo.net, O=博恩斯科技发展有限公司, L=天津市, S=天津市, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
2B164B9960C17A65116C446FB366B019

File PE Metadata
Compilation timestamp:
3/11/2014 5:23:38 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:PUf2bOSssjQR/L/32eMJjBfTkLaTURZ9JGSOWE17KZM4XwZE4DFcg5Z1lzGm:PDsdD3jM1ZTkLaTYZ9r3EfKwZE4+Agm

Entry address:
0x39184

Entry point:
E8, 27, E8, 00, 00, E9, 7F, FE, FF, FF, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 24, 0F, 50, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, 38, CA, 4F, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, 24, 0F, 50, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00, 00, F7, C6, 03, 00...
 
[+]

Entropy:
6.5577

Code size:
848 KB (868,352 bytes)

The file 2014-03-13_jscss.1395216042.exe has been discovered within the following programs.

Adobe Reader X (10.1.5)  by Adobe Systems Incorporated
Adobe Acrobat X (version 10.0) is an applications designed to view, create, manipulate, print and manage files in Portable Document Format (PDF). Acrobat and Reader are widely used as a method of presenting information with a fixed layout similar to a paper publication.
www.adobe.com
4% remove it
Java 7 Update 13  by Oracle Corporation
This release includes important security fixes. Oracle strongly recommends that all Java SE 7 users upgrade to this release.
java.com
9% remove it
Java 7 Update 15  by Oracle Corporation
Publisher's description - “The full version string for this update release is 1.7.0_15-b03 (where "b" means "build") and the version number is 7u15. JDK 7u15 contains Olson time zone data version 2012i. For more information, refer to Timezone Data Versions in the JRE Software.”
www.oracle.com/technetwork/java/javase/7u15-relnotes-1907738.html
6% remove it
Java 7 Update 7  by Oracle Corporation
Publisher's description - “This releases brings in key security features and bug fixes. Oracle strongly recommends that all Java SE 7 users upgrade to this release. JavaFX 2.2.4 is now bundled with the JDK on Windows, Mac and Linux x86/x64.”
12% remove it
QuarkXPress  by Quark Inc.
www.quark.com
8% remove it
The Sims™ Life Stories  by Electronic Arts
The Sims Life Stories is a video game distributed through EA's Origin digital distribution and digital rights management content delivery system.
www.ea.com
5% remove it
Total Video Converter 3.71 100812  by EffectMatrix Inc.
Publisher's description - “E.M. Total Video Converter is a piece of extremely powerful and full-featured converter software that supports almost all video and audio formats.”
www.effectmatrix.com/total-video-converter
19% remove it
TVCenter  by PCTV Systems
Publisher's description - “PCTV TV Center is equipped with a powerful PVR functionality. You can watch your favorite TV stations, timeshift, schedule recordings and much more . PCTV TV products bring TV to your computer. You can easily enable your PC / Laptop with a full featured TV functionality.”
www.pctvsystems.com
23% remove it
 
Powered by Should I Remove It?

The file 2014-03-13_jscss.1395216042.exe has been seen being distributed by the following URL.

http://dlsw.baidu.com/sw-search-sp/soft/50/.../2014-03-13_JsCss.1395216042.exe

Scan 2014-03-13_jscss.1395216042.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.