home

java development kit-8.exe

Neseremad

AgileMax (New Media Holdings Ltd.)

The application java development kit-8.exe, “Neseremad Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The installer is marketed through download protals and search ads as the free Oracle Java Runtime but will also install additional software offers which include adware, PUPs and browser toolbars.
Publisher:
AgileMax (New Media Holdings Ltd.)  (signed and verified)

Product:
Neseremad

Description:
Neseremad Setup

Version:
1.7.5.7

MD5:
ba599b52a5093110a020a76c5618ca9d

SHA-1:
d1ffe8f3d025389160b837b43cb75ca92fcbd2b4

SHA-256:
d9052d02841e635a269154d7bd2503558f85939b8fe65e6267653b2c92e57790

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/24/2024 4:34:56 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH (M)
16.8.6.22

File size:
912.8 KB (934,656 bytes)

Product version:
2.3.0

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\downloads\java development kit-8.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:04:31 AM

Valid to:
10/30/2016 12:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:HiQPdiGeCoNbqaE5OfPLCaIZi7Y7TsAjKLll7u:Cu3e1NmajTI4A4AG5

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file java development kit-8.exe has been seen being distributed by the following URL.

http://www.giftvaultbinaries.com/S24tQbBMn3clzGRFe3t9BL1sO1wmscJzh8La 6Zm zCjvG0ckFQSEbstUoIRgyIQcGV3Op6C745RuWvgknIt4CwnlrcBJB9rzhyW_C 4nwjYR9 nSYd2puq91jDvv0qlmOHqM0QRTTdBt3p6itdZPl AP5vRzOZ9jfPXk9O0VKlNoj3AfJ3ikizVNZstthgkLJDSHIp4hHoe Jw0nVnSA21uURaksYf2INlCvBzGyb6Z4WE9kYeTBm HQUly0pwDglhbKQJiH SXOasfw5SpFQPgVrVLPFTdO ieQM2tm_dHy3RaCWxQhRnm4sjYCaHj0qawhrDvh1_pSEKjld2zkXRrjwiSNefDrr57d A8KCohlGXZWAuDbF3NuHvXiLl eNPtrUxInqDFdYbTF4hGxRZATIqi5fzuXUmtU9K3ooTwyE_bI9rryaxG_64tuKfQv_8wAcp3IU5iEfOFPb6Kh8eW0fywIA==-G0wAAETdFtP IiLdpCVNHII2X 4xNvaVclzrKYfnMM8nwd7pGjPk4T8MYzakAFmyWWsoho8 a7t 90PDu4EPZC2mFA==

Remove java development kit-8.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.