home

chaplina mushka fb2.exe

Java Platform SE 7 U4

Prof Assist

The application chaplina mushka fb2.exe, “Java(TM) Platform SE binary” by Prof Assist has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from combr.ru.
Publisher:
Oracle Corporation  (signed by Prof Assist)

Product:
Java(TM) Platform SE 7 U4

Description:
Java(TM) Platform SE binary

Version:
7.0.40.20

MD5:
b1ceb46861427d01b07b444d046e1417

SHA-1:
e4a9d47d57c479997bff49cbc0903ffa19d33474

SHA-256:
4db2a22803fbf5c53331b46169b9689cd66e4f446abdd93a1b8ff042d44b7de0

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/28/2024 3:52:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ProfAssi (M)
16.7.12.7

File size:
585.5 KB (599,536 bytes)

Product version:
7.0.40.20

Copyright:
Copyright © 2012

Original file name:
javaw.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\chaplina mushka fb2.exe

Digital Signature
Signed by:
Prof Assist

Authority:
COMODO CA Limited

Valid from:
6/16/2016 3:00:00 AM

Valid to:
6/17/2017 2:59:59 AM

Subject:
CN=Prof Assist, O=Prof Assist, STREET="d. 2 kv. 34, ul.Vozdushnaya", L=Kaliningrad, S=Kaliningrad, PostalCode=236010, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2834FB06F20CE3ED975A64A6A9DC2F35

File PE Metadata
Compilation timestamp:
7/2/2016 11:22:08 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:lECLwpBTnc2k0/+K4J1Ms8e/x/CAA9ewdZcT7mnousKigtGG9jeLX91/+phJ/:KNDc2AJ+s8Mvwn+Xu5igUGhyX9O/

Entry address:
0x1290

Entry point:
55, 8B, EC, B8, 80, 8B, 00, 00, E8, B3, FF, FF, FF, 53, 56, 57, C6, 45, F4, 3E, C7, 85, 54, 77, FF, FF, 03, 00, 00, 00, 68, 04, 94, 41, 00, FF, 15, 14, 30, 41, 00, 8B, 85, 54, 77, FF, FF, 83, C0, 0C, 89, 85, 54, 77, FF, FF, 81, BD, 54, 77, FF, FF, 11, 3B, 00, 00, 76, 02, EB, 09, B9, 29, 00, 00, 00, 85, C9, 75, CF, 68, 08, 94, 41, 00, FF, 15, 14, 30, 41, 00, 68, 0C, 94, 41, 00, FF, 15, 40, 30, 41, 00, 68, 27, 0B, 00, 00, 8B, 95, 58, 77, FF, FF, 52, FF, 15, 0C, 30, 41, 00, 8B, 85, 54, 77, FF, FF, C1, E8, B5...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
71 KB (72,704 bytes)

The file chaplina mushka fb2.exe has been seen being distributed by the following URL.

http://combr.ru/824h?keyword=??????? ????? fb2&charset=utf-8

Remove chaplina mushka fb2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.