home

java_update.exe

Application

program

The application java_update.exe, “Application Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.bundlecentercity.com and multiple other hosts.
Publisher:
program

Product:
Application

Description:
Application Setup

MD5:
16b8db5c639782d2f36adc4747d5e6d3

SHA-1:
9374ef47ad18fa6abe54659b9d50fc3287144ae2

SHA-256:
4120622baad2f7fb826a76ceafc214c0fd20455b2d93f0d4046df5e1a54e8776

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 10:44:50 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.program.Installer.Meta (M)
16.2.12.19

File size:
942.1 KB (964,696 bytes)

Product version:
5.3.8

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\java_update.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:omtdSc2A9k2MUxfb/AWz2panOlyXori5QWqs0s5:ouV2fzsDVPnwyXqi5Xn1

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file java_update.exe has been seen being distributed by the following 39 URLs.

http://www.bundlecentercity.com/c?x=/NXGZApSXOv7X exiUsLtJXy5BJ pZfB5ncDiTVMRzk=&c=abah0wvcTjqYxFBYymIWQT3ahxg1Dys3ycemBy6zEckG8FcSDwfpjBIiBAXvIahVO4NyFIBk CGdtMp50YNWqPeKKnQg2o/nsuyTWF1nMNrCe1tZE3JiPUsHM6AmazVC&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=OjkmHjg43Q5mTjzx7d HpwInEUUZnY3eIuMZk2j7C o=&c=YUEoGr6WQd/Q9piz7AKFf09S8kmDOvs dGLuKerG38TKbuEAwSarTp3G4W01qNQSWl1Mrpmle/z5Q0gwp1wsAAqMFwIcEOfYk1mHmQZuYSCA2BGrWO9pYjXv5V4Le5qM&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.bulkapplicationsclean.com/c?x=m2SBUk4IEXah PqlCT0cEFYI0eIf60wQ7JhFthdYBa8=&c=RnVZ0E1VpNgPouK9KYPfe l8kpF6c8vKXKMHjXlQROCACdwg/WtTUImTTNWTRiIHqsE5TrmHnZIGXefQFfWgzKz3UyhQdl8lB6iUGkEWnj2Z6SDOkW0yYLwdOjFgYbVa&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.dlstockhost.com/c?x=CVc6 9PFbDzFZ2Ar8KaH1lZGrpVSkJVOWrlkt857myA=&c=ozQokDAzM79LDMJfHAN7J7lYFXyvquiUfvCepqodIlRft4azbgKW7J1vX/QiOAfh5DwVK0bmr9OZj6Rv/WB/j83MgBB7aUfa4irBdAUx8ssASU T3I512o/KLdNbkKJe&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.bulkapplicationsclean.com/c?x=8knRTDXAt7mW1N0q64fL9HbUlRU1j8dQL5IsfCciMK8=&c=UCyqFyeiSs62qRVjKEInYwjeAo4wffqWaxoxJs2iYlZIBUXF0kqx0w/6FAKDPHbn90w0jHsaa55wViZzBlEvxK7NAl2QOYIhNXqrkcA3C6rmzFwh50XZePEWs2IeFsZm&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=lpKxnYqTcZQ6HphIb5gBgFdvhkJPgk1MjH3CElbShi4=&c=X1fxl4PPlplSkXxJf4iSn8x138I16XiL nkGGR1a4KqLuJ80NzoJ5gW8wKG2ljdX3fCOPi6YOBLplwbMoDl wc41tWJoMW L9O8M IyJp0rCDvXZhljOEUdIXreDxQtw&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=byrzCRSzqEYgFSC0iYR8MvVrTCGgS3sjXX0oHuJFCmI=&c=RjEBTAhWROxJvERXf QPjWqDA0RBwJQyoXu5x8jhDXmrdw tRKrQQyyPJyX/OpHRO5u6OFwPgIKQ1CyQoS/pxZslxI Z7qWqTgeWYWJbbruS2TyNkiC wLhtMGHwYNV8&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=vLvyPkXuKl IFM1hfinilEiCKg9qpe85B4n0i3x4luk=&c=UXjDa4go4iFWW1P3kSb3BF897KcAUvANC0FeAw2KTd9ciuke3j yY5E7SgmHrleLzESAIzyirAaKCFVNP0mdsw46r77UMIjGYBm5h8lat7Vh264hBVhkZxfsDJ3RwkHA&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=242PLlKabXF1RsXMtu6O24GAV6DyMH4gZfJBxO8rO40=&c=Av2npHXU2zey6tzBnQ3/3HQsWJGCnoQSe caWGJw9Z8cMr/W6GdcsoQs/8DRyZWsA7/dy/ZkaFUoUEWWq9Q6Sjo//YSPdeHF0DGGBFuYYkGK3dpis5hwX00up0hgQmeV&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.applicationtowerspresent.com/c?x=inG4GNWi351cJEvg/csGSwzxPNORHMLiFSz8GHwU3CY=&c=f2 obL1I1aWInBn sppCoFQGE2EAOE4BXtYaHZteAKZehVfWMAqaivV9DeII749P57lVoRfK0EPIsKC7BASdG67lMWJq/5aGCGc6tnO3B6yeQv2cK0u93JOKeMaTy63C&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.bulkapplicationsclean.com/c?x= vKLmZQxcshv7ifASVd7geyFrRr8OEsTqA5SdcvlEME=&c=7MDX1l13CNpExdF01LWqt9 aYLeTgcwOThoAURatMBDryLRgWHfFMY0GW2sXDA0Gb9tsZjjDDnxPr 7l8xb4jZ9SMoVJ0xeOcl/zmaFkIBAPJLteE5Lv/aERreaEaAoj&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=pA6XgSomyDscMprd/FlYkjt38CIVCLNnuoHkD75fEik=&c=ZTrpPYvIGhMVVHgzhb1OCblP KdCyy9MME8nGyCxLoDH0Yn2fcPF99mVoyLz75 3ylC2SNyWA48/oTZlYB0JWtHYnUe/bY79vCH2rcWXwcCdCvqb0qA33KaFKrtszz V&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.dlstockhost.com/c?x=en1jiTFt/0c M44gWBbAB6fxRIewj7DSLGkG1yxNpwE=&c=2S7YqozRtgphrfwE0Q NA44TpOGdI75qh27nHRs Hhndg86N wuT5F2UqMTDvF5dpEDpcNInuyX/CGiRyTM/5R3v7KWNJpMLOXUNh3iEPHzT 4l2WVXoGVogV50e sR0&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=izHxKnpNfhkYXLQ3v 3idXNc3BS/ehN wyNDyl2dKMk=&c=8/VfIdLvlB3HurcwSTBIr Zp43eMAURJUMq64/R1 bnKGrNv8eB1hKw Av4YW9OoYE4UvAi06N1OReO9qldO09KtecRBECX1zGEDLxvIkjp3YNGYqDeeyPF96OYy6B8I&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.dlstockhost.com/c?x=9lAu/e/3Favj V7uv3v nggueFHDm0Qzehoo08YtxIM=&c=6rbLZ9bX7Td/BMeiT3yJGNW1S2SnUkzbJxl5Zw7YiwX2CBOfkRNEIl7MLAGWx2/hAERhuspHIZClHcn2LBUz5EWenpSltjEzxoALXxnY57hhdkChTKGSlAb9v08y/EQH&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.applicationtowerspresent.com/c?x=wNuCPHnNYNW56meVrhOPAlElaKO7qA/UdgIxtWVdO7c=&c=oAJ9roDIswX2F4jNCLbANm2nPA9MREfuGnwfKpEoV7sqwwfr785tCH2awcopt yiCEuPXphmOjiC58X4dItQYvMUJamwljSCBunNn J4CiaGI8aXb zzghpIi5a3r7uy&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=4IeCDucqHI4tBuAtG/PWt3CUBqFHVzNJy KbQP7yT44=&c=cNiIC2/go7P9N6z/fsGIyHL De11i631tpf9wXdYxYZQ9tg8S2bBqqg9ZI1JNgwwjAfz6kDG2ahwXXimg5W/NRVM 0uVOHNWyv2OPe2 K4QEuhB1kM6rtcQ2hmZTFjdo&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.bulkapplicationsclean.com/c?x=HdObCTkZfThiF6DMpMbVDEgxpJVK11j0LPhgw5GMFLY=&c=yi99AEdn9sRk/nPizYmWJTgP0XMfbfTawCyQU7C4pL lvMD evMvUiv 0OcPXEU DfccGhlToffZNnFwpldHwPtBhhVNiPB3Fztv7MrF7o9XmTyJABPOHbRuLy6bzK1J&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.bundlecentercity.com/c?x=6o7CmgqFsWZPX6jsRUFmWO7AAR9n78mEYVKBWbUYpE0=&c=3TRop1t/sQO0mpBDE/CU4hcow0lY17weTgcTMaT1iZWP8Lol WKmW0 4wm2VHnswXXSGAix9OQ0CzHIom8j8/wzTx3NjAFplKDpKUSNLyLN2bnHSjwzykebI3fFdICiE&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=Fg/0IPY0j3q2ED5I1mQMtK0N/LT3H 2Ah86mp4N6Ox4=&c=Y0xW0308 rqSr/ktBgaEDr2DACEBIiueurQ/xGsxgug3JxlDdErvJd6Rs7SpntHQkSPTTESuthKXKj3UUA5vvZvwyATIHOft1rr7YhvxsTZ8eiaLsv TG FMtVaIUBZK&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.packagechucklegrab.com/c?x=EO05tnZyH47tJVVmrfBxKNIKfFE2bBpmi0g4Y5CC0sA=&c=nURvOPVGUHYsQW/7ojMUnhH9TtUqrawhr2mG17Z4lbi21lbVY6bnZmJ7yxOmzFzjKzaCNW/fqhEjG75RrRXQNxPSXMcH1iDJnKRmiqGoTn XzKsQaKCrIzo0oDMotw8w&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=a2wmbk4TAYB1N/cuZSKG7VJYOpOKIiPnTYiVoTH4xpQ=&c=wMtIiA750kkpN7k r0DSIMY VpOt8Rdwdwe5/ACjrnAa5PBFsBuQ7ZtPG3szEu1gbdjd/PuAdrAJ7JAWcxJt5wsRanI1YjIjz6kVY2ZsAUyv8QFoBUWDA9UhDGiB0yvH&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=cnMTUU3W66qnIcMBeCUBD88fe0UXuyFHLL V1DYW/Mw=&c=Y94/XzG746L qlk IXemZ3OCSFJhDAy/J5Oapplk xdMjNAft4hemvxoD0hzp26oA4YW2YtgB24/kF8ZO2ckyvadsjyB5TzmXZQ1xYwwf5bXMZTllIdeb/O23PpphA67&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=8Z8iDt3rfGWTNPce3/FaKk3R9D9pG/AEwL8cZMk5Lqs=&c=MXq6Mwa9kHXr6emht7azv 7lhS5owScr1Fm9P1kA0IiNrbhPpdM8SoRHesScNVvp9WIsdx6qobn4chp6ZxGX1H8sLbo8GjjrTPTlvUFtEM1O2K7Scnn6LjEPeOG3wR/E&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=7E5A8ZXxgDHXMbHEa2AaS1xy yJjG1WkDDtoFLv1Zfc=&c=6N2nhVGHhmCUJLDVcC8NTXcKJZ5x1lcoKbLA8FrMrmZBHl0dmnZGfTwryFGaWir8mkOQNsGCMZDnzGtraUb9p6hjoc7pjgQHCP9HXsTkCzsCXpA/JudFyJjDyWwdrdeB&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.towertagbundle.com/c?x=Of3wlpf02CoFth6LPxFHtRxj40LT05Fov1qPr4cvgVY=&c=ttWKcwcUsY2c6qqx25IuVxf/VV9hlqfuNW7gKjwFcu1uedeBOR3p19IiMRQHEM 9SIQDxRhxd9o1vZjiaFj6CZyLkoil0pRvcvG PLJbm ja9Qis6KouDQn5fxyjzJfE&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.applicationtowerspresent.com/c?x=Ntl7ZMtiHx5gdlUtEIqopBLpjXp87VAnq/KcSDM62TI=&c=zSj9OPzcnvEF K6X0XNHZNtnRb/2tpg/rmS5oEJO9czozaYyuiu1ulg95oSsaAo0G3jV17vAgNcq6FzHTTaFskayrZm0uq1PEQg1WpTUHb0Sf8q tYgTM0Xz/OI3IL/X&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.dlstockhost.com/c?x=X6FVRvfXfjSelTgomGtmyphXUAb0H7Z4rh4Asf1LjKM=&c=4hkNgbcqWtjOn4pW8vXlpWS6rp3cixKt2Le neq3oZMxexHSVs1nR0 HQVUP4dWZGswVp1LeIMoHiW3hP47Bsc7lxy8MNEHOE6iL0SrcDWenQCB66Tl5Rbwn zG7GND&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.clearmetafun.com/c?x=FGl/u0lMLUHJXGr68yhiKCTk Q9jqmbEJANKKdTudoQ=&c=vMenfxBDWg3Jrc6/8z27Cew4hCRdFbmijtv6BAs6TU7 UADYV a8fXPaGyGXKkxYEsLCpNW9yp7/NHoaw45kxY1lHYR ow7Lv KLy8R9Z/jGvT6FBNtBvaoACOOPPiOR&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

http://www.applicationtowerspresent.com/c?x=Z4SWRow87thUeOHJ5cMmNN4ae QTiGtkBmFxMOWKwPs=&c=2 FvmA/Y9qsqI8O3kuc5Z9m9CNQ5BOyAs79FNNM472UrrRlJZoQ7U9cSVsTuHd7kpGlPPHZHZ2h6AnKGEPiWHVWaeicNbjrzn13aZXy/RW0Nf6k/3RvCOJvi1Miwkx9j&downloadAs=Java_Update.exe&fallback_url=http://javadl.sun.com/webapps/.../AutoDL?BundleId=94214

Latest 30 of 39 download URLs

Remove java_update.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.