home

vhonkrucqudm.exe

Java Platform SE 7 U4

Prof Assist

The executable vhonkrucqudm.exe, “Java(TM) Platform SE binary” has been detected as malware by 1 anti-virus scanner.
Publisher:
Oracle Corporation  (signed by Prof Assist)

Product:
Java(TM) Platform SE 7 U4

Description:
Java(TM) Platform SE binary

Version:
7.0.40.20

MD5:
41d6a65817fb9edde9ce716c97f850c9

SHA-1:
983608bf62d743356d7a0ba1a647f825d9ad5f2d

SHA-256:
5880e4035a7945bc920ae3df6d8bb71c0f72cff2ef618f37b163ebeb54f8a1d2

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
1/1/2025 12:37:03 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.11.8

File size:
588.5 KB (602,608 bytes)

Product version:
7.0.40.20

Copyright:
Copyright © 2012

Original file name:
javaw.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\vhonkrucqudm.exe

Digital Signature
Signed by:
Prof Assist

Authority:
COMODO CA Limited

Valid from:
6/16/2016 8:00:00 AM

Valid to:
6/17/2017 7:59:59 AM

Subject:
CN=Prof Assist, O=Prof Assist, STREET="d. 2 kv. 34, ul.Vozdushnaya", L=Kaliningrad, S=Kaliningrad, PostalCode=236010, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2834FB06F20CE3ED975A64A6A9DC2F35

File PE Metadata
Compilation timestamp:
7/2/2016 8:43:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x1290

Entry point:
55, 8B, EC, B8, 50, 8B, 00, 00, E8, B3, FF, FF, FF, 53, 56, 57, C6, 45, F4, 3E, C7, 85, 54, 77, FF, FF, 03, 00, 00, 00, 68, 04, 94, 41, 00, FF, 15, 2C, 30, 41, 00, 8B, 85, 54, 77, FF, FF, 83, C0, 0C, 89, 85, 54, 77, FF, FF, 81, BD, 54, 77, FF, FF, 11, 3B, 00, 00, 76, 02, EB, 09, B9, 29, 00, 00, 00, 85, C9, 75, CF, 68, 08, 94, 41, 00, FF, 15, 2C, 30, 41, 00, 68, 0C, 94, 41, 00, FF, 15, 1C, 30, 41, 00, 68, 27, 0B, 00, 00, 8B, 95, 58, 77, FF, FF, 52, FF, 15, 14, 30, 41, 00, 8B, 85, 54, 77, FF, FF, C1, E8, B5...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
71.5 KB (73,216 bytes)

Remove vhonkrucqudm.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.