home

jdk-7u40-windows-x64.exe

Java Platform SE 7 U40

Oracle America, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from ws.tpu.ru and multiple other hosts.
Publisher:
Oracle Corporation  (signed by Oracle America, Inc.)

Product:
Java(TM) Platform SE 7 U40

Description:
Java(TM) Platform SE binary

Version:
7.0.400.43

MD5:
7412ccc2ac8a0f418eb58c5f170742a3

SHA-1:
d6901306466383242661be12c7c6a4e6857083cb

SHA-256:
354d92a37b3ac773d771b6494d810b3346543ac3b43e98a3a76488003a18b221

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:09:57 PM UTC  (today)

File size:
125.3 MB (131,337,120 bytes)

Product version:
7.0.400.43

Copyright:
Copyright © 2013

Original file name:
jdk.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\jdk-7u40-windows-x64.exe

Digital Signature
Signed by:
Oracle America, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/8/2013 9:00:00 AM

Valid to:
8/7/2016 8:59:59 AM

Subject:
CN="Oracle America, Inc.", OU=Software Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Oracle America, Inc.", L=Redwood Shores, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0A4F987A769E4A353B26878A3BD3D3DE

File PE Metadata
Compilation timestamp:
8/27/2013 4:25:27 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:rtkM3UU5rufB3VhhFPCIaCL+OczUjlNUgullVUOW1BK:hkM95SfB5gCLIUjljunWHK

Entry address:
0x6224

Entry point:
48, 83, EC, 28, E8, 9B, 6D, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 40, 53, 48, 83, EC, 30, 48, 8B, D9, B9, 0E, 00, 00, 00, E8, F5, 31, 00, 00, 90, 48, 8B, 43, 08, 48, 85, C0, 74, 3F, 48, 8B, 0D, 3C, 51, 01, 00, 48, 8D, 15, 2D, 51, 01, 00, 48, 89, 4C, 24, 20, 48, 85, C9, 74, 19, 48, 39, 01, 75, 0F, 48, 8B, 41, 08, 48, 89, 42, 08, E8, FD, E9, FF, FF, EB, 05, 48, 8B, D1, EB, DD, 48, 8B, 4B, 08, E8, ED, E9, FF, FF, 48, 83, 63, 08, 00, B9, 0E, 00, 00, 00, E8, A2, 30, 00, 00, 48, 83, C4, 30, 5B, C3...
 
[+]

Entropy:
7.9996  (probably packed)

Code size:
72 KB (73,728 bytes)

The file jdk-7u40-windows-x64.exe has been seen being distributed by the following 10 URLs.

http://ws.tpu.ru/.../jdk-7u40-windows-x64.exe

http://download2162.mediafire.com/kk5exltgi2zg/.../jdk-7u40-windows-x64.exe

http://download2162.mediafire.com/46tfnhej11mg/.../jdk-7u40-windows-x64.exe

http://download.oracle.com/otn/java/jdk/.../jdk-7u40-windows-x64.exe

https://edelivery.oracle.com/akam/otn/java/jdk/.../jdk-7u40-windows-x64.exe

https://edelivery.oracle.com/osso_login_success?urlc=v1.2~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

https://login.oracle.com/oam/server/.../auth_cred_submit

https://s3-ap-northeast-1.amazonaws.com/.../jdk-7u40-windows-x64.exe

https://edelivery.oracle.com/otn-pub/java/jdk/.../jdk-7u40-windows-x64.exe

http://download.oracle.com/otn-pub/java/jdk/.../jdk-7u40-windows-x64.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.