» jre-6u15-windows-i586-iftw.exe
Overview
Analysis
File Details
Programs (1)
Downloads (6)

jre-6u15-windows-i586-iftw.exe

Java Platform SE 6 U15

Sun Microsystems, Inc.

File name:

Publisher:

Sun Microsystems, Inc. (signed and verified)

Product:

Java(TM) Platform SE 6 U15

Description:

Java(TM) Platform SE binary

Version:

6.0.150.71

MD5:

136a98c6cfbe8ec417c4fb854d0db546

SHA-1:

6068ce6c957932593d20059bebab0dfc8b056ac3

SHA-256:

7db0b3d834be659854c7ce72e3469ac2adec0752123086c6f00d4a462d5c22e6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 4:05:49 AM UTC (today)

File size:

697.8 KB (714,528 bytes)

Product version:

6.0.150.71

Original file name:

jinstall.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\jre-6u15-windows-i586-iftw.exe

Digital Signature

Signed by:

Sun Microsystems, Inc.

Authority:

VeriSign, Inc.

Valid from:

5/24/2009 7:00:00 PM

Valid to:

7/14/2012 6:59:59 PM

Subject:

CN="Sun Microsystems, Inc.", OU=Sun Microsystems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sun Microsystems, Inc.", L=Palo Alto, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2009 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0F3DAAC815F6789999223A8083B44BF5

File PE Metadata

Compilation timestamp:

7/31/2009 9:31:42 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

12288:6pD2ELr1JsbHBvhlNQ75BoADl+lbuk492hEE:6pD2EH7sb3lUvDlZ97E

Entry address:

0x1450F

Entry point:

6A, 60, 68, A8, 2F, 42, 00, E8, 35, DD, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 79, EB, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 88, 02, 42, 00, 8B, 4E, 10, 89, 0D, 24, 95, 42, 00, 8B, 46, 04, A3, 30, 95, 42, 00, 8B, 56, 08, 89, 15, 34, 95, 42, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 28, 95, 42, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 28, 95, 42, 00, C1, E0, 08, 03, C2, A3, 2C, 95, 42, 00, 33, F6, 56, 8B, 3D, 00, 01, 42, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03... 
[+]

Entropy:

6.6314

Developed / compiled with:

Microsoft Visual C++ v7.0

Code size:

124 KB (126,976 bytes)

The file jre-6u15-windows-i586-iftw.exe has been discovered within the following program.

Coupon Printer for Windows by Coupons.com Incorporated

Coupon Printer for Windows is software that allows users to build and print coupons that will be accepted at retail stores from Coupons.com. The printer application also bundles the CouponBar, a web browser toolbar.

www.coupons.com

69% remove it

The file jre-6u15-windows-i586-iftw.exe has been seen being distributed by the following 6 URLs.

https://www.rumpold.net/sprueche/.../msjavx86.exe

http://sdlc-esd.oracle.com/ESD6/JSCDL/jre/.../JavaSetup6u15.exe

http://dl8-cdn.sun.com/s/ESD6/JSCDL/jre/.../jre-6u15-windows-i586-iftw.exe

http://sdlc-esd.sun.com/ESD6/JSCDL/jre/.../jre-6u15-windows-i586-iftw.exe

http://sdlc-esd.oracle.com/ESD6/JSCDL/jre/.../jre-6u15-windows-i586-iftw.exe

http://dl8-cdn-03.sun.com/s/ESD6/JSCDL/jre/.../jre-6u15-windows-i586-iftw.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.