home

dlya iphone 4s na kompyuter.exe

Java Platform SE 7 U4

Prof Assist

The application dlya iphone 4s na kompyuter.exe, “Java(TM) Platform SE binary” by Prof Assist has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from dnsrv.ru.
Publisher:
Oracle Corporation  (signed by Prof Assist)

Product:
Java(TM) Platform SE 7 U4

Description:
Java(TM) Platform SE binary

Version:
7.0.40.20

MD5:
b17f6a407739b2dadf15b6fda3c3cfc0

SHA-1:
59a20b56548676dbedd3ca3065af5d731a129721

SHA-256:
9627a05124228953a23be49a4626004e9121f6b2c55c2a22291d6051d95a4a05

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/12/2025 3:29:00 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ProfAssi (M)
16.7.7.22

File size:
589.5 KB (603,632 bytes)

Product version:
7.0.40.20

Copyright:
Copyright © 2012

Original file name:
javaw.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\dlya iphone 4s na kompyuter.exe

Digital Signature
Signed by:
Prof Assist

Authority:
COMODO CA Limited

Valid from:
6/16/2016 3:00:00 AM

Valid to:
6/17/2017 2:59:59 AM

Subject:
CN=Prof Assist, O=Prof Assist, STREET="d. 2 kv. 34, ul.Vozdushnaya", L=Kaliningrad, S=Kaliningrad, PostalCode=236010, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
2834FB06F20CE3ED975A64A6A9DC2F35

File PE Metadata
Compilation timestamp:
7/1/2016 12:25:43 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:8cJPZroDMNi7rpJLUdWq7GgAtTUNZOznOoR:8A6QN4rpTq6VtQwzFR

Entry address:
0x1290

Entry point:
55, 8B, EC, B8, 80, 8B, 00, 00, E8, B3, FF, FF, FF, 53, 56, 57, C6, 45, F4, 3E, C7, 85, 54, 77, FF, FF, 03, 00, 00, 00, 68, 04, 94, 41, 00, FF, 15, 14, 30, 41, 00, 8B, 85, 54, 77, FF, FF, 83, C0, 0C, 89, 85, 54, 77, FF, FF, 81, BD, 54, 77, FF, FF, 11, 3B, 00, 00, 76, 02, EB, 09, B9, 29, 00, 00, 00, 85, C9, 75, CF, 68, 08, 94, 41, 00, FF, 15, 14, 30, 41, 00, 68, 0C, 94, 41, 00, FF, 15, 40, 30, 41, 00, 68, 27, 0B, 00, 00, 8B, 95, 58, 77, FF, FF, 52, FF, 15, 0C, 30, 41, 00, 8B, 85, 54, 77, FF, FF, C1, E8, B5...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
71 KB (72,704 bytes)

The file dlya iphone 4s na kompyuter.exe has been seen being distributed by the following URL.

http://dnsrv.ru/tables?keyword=???????? ??? iphone 4s ?? ?????????&charset=utf-8

Remove dlya iphone 4s na kompyuter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.