home

hack by revq.exe

Java Platform SE 7 U4

Prof Assist

The executable hack by revq.exe, “Java(TM) Platform SE binary” has been detected as malware by 1 anti-virus scanner.
Publisher:
Oracle Corporation  (signed by Prof Assist)

Product:
Java(TM) Platform SE 7 U4

Description:
Java(TM) Platform SE binary

Version:
7.0.40.20

MD5:
dcb8e12e684358bfab2b8139c9cd0d7e

SHA-1:
e98970c84187336edcb5065f0d602677ac0ed5c6

SHA-256:
3f541c77cd9891e002488a288793c5dda63910da5a591f48f12f25126c7353de

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
1/1/2025 1:08:49 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.12.17

File size:
612 KB (626,672 bytes)

Product version:
7.0.40.20

Copyright:
Copyright © 2012

Original file name:
javaw.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\hack by revq.exe

Digital Signature
Signed by:
Prof Assist

Authority:
COMODO CA Limited

Valid from:
6/16/2016 6:00:00 AM

Valid to:
6/17/2017 5:59:59 AM

Subject:
CN=Prof Assist, O=Prof Assist, STREET="d. 2 kv. 34, ul.Vozdushnaya", L=Kaliningrad, S=Kaliningrad, PostalCode=236010, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2834FB06F20CE3ED975A64A6A9DC2F35

File PE Metadata
Compilation timestamp:
7/3/2016 3:10:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1290

Entry point:
55, 8B, EC, B8, 50, 8B, 00, 00, E8, B3, FF, FF, FF, 53, 56, 57, C6, 45, F4, 3E, C7, 85, 54, 77, FF, FF, 03, 00, 00, 00, 68, 04, E4, 41, 00, FF, 15, 24, 80, 41, 00, 8B, 85, 54, 77, FF, FF, 83, C0, 0C, 89, 85, 54, 77, FF, FF, 81, BD, 54, 77, FF, FF, 11, 3B, 00, 00, 76, 02, EB, 09, B9, 29, 00, 00, 00, 85, C9, 75, CF, 68, 08, E4, 41, 00, FF, 15, 24, 80, 41, 00, 68, 0C, E4, 41, 00, FF, 15, 1C, 80, 41, 00, 68, 27, 0B, 00, 00, 8B, 95, 58, 77, FF, FF, 52, FF, 15, 14, 80, 41, 00, 8B, 85, 54, 77, FF, FF, C1, E8, B5...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
91 KB (93,184 bytes)

Remove hack by revq.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.