home

jdk-6u27-windows-x64.exe

Sun Microsystems, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from download.oracle.com and multiple other hosts.
Publisher:
Sun Microsystems, Inc.  (signed and verified)

MD5:
51a478b85ecff7d9144009f70e843f03

SHA-1:
80ab7fdf0b98e1b3b776fd8c0e2e011621561715

SHA-256:
f107ea83dcc114d7c124839507d80338ef787202507302a1f6ba5d2c288f2408

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:16:21 PM UTC  (today)

File size:
67.4 MB (70,678,808 bytes)

File type:
Executable application (Win64 EXE)

Digital Signature
Signed by:
Sun Microsystems, Inc.

Authority:
VeriSign, Inc.

Valid from:
5/25/2009 8:00:00 AM

Valid to:
7/15/2012 7:59:59 AM

Subject:
CN="Sun Microsystems, Inc.", OU=Sun Microsystems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sun Microsystems, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F3DAAC815F6789999223A8083B44BF5

File PE Metadata
Compilation timestamp:
7/19/2011 7:10:38 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1572864:kAUUwonlo6l/Vz3TBGhWrajAomqUhUxGHSFxpg/ifhTYy0:QKnp1310Wr2VUhpHkzg/4hx0

Entry address:
0x4D60

Entry point:
48, 8B, C4, 48, 81, EC, A8, 00, 00, 00, 48, 89, 58, 18, 48, 89, 78, 20, 48, 8D, 48, 88, FF, 15, 7C, 85, 00, 00, 90, FF, 15, 6D, 85, 00, 00, 48, 8B, C8, 33, D2, 41, B8, 94, 00, 00, 00, FF, 15, 4C, 85, 00, 00, 48, 8B, D8, 48, 85, C0, 75, 0A, B8, FF, 00, 00, 00, E9, 62, 02, 00, 00, C7, 00, 94, 00, 00, 00, 48, 8B, C8, FF, 15, C3, 83, 00, 00, 85, C0, 75, 1E, FF, 15, 31, 85, 00, 00, 48, 8B, C8, 4C, 8B, C3, 33, D2, FF, 15, 1B, 85, 00, 00, B8, FF, 00, 00, 00, E9, 31, 02, 00, 00, 8B, 43, 10, 89, 05, 24, F5, 00, 00...
 
[+]

Entropy:
7.9989  (probably packed)

Code size:
48 KB (49,152 bytes)

The file jdk-6u27-windows-x64.exe has been seen being distributed by the following 2 URLs.

http://download.oracle.com/otn/java/jdk/.../jdk-6u27-windows-x64.exe

https://login.oracle.com/pls/.../orasso.wwsso_app_admin.ls_login?Site2pstoreToken=v1.2~CA55CD32~D3BCFB5E9A7B32E6F296AD932B8433D025BCB7C58BAC65F14D5A55AB1EF4B6A2DEFC7A69E9AB8B0D78885703276E5A906416BA8366C7823AA1B979CB84DBAC70FABEE8031326AC12A1AF98004A79485F6F64D5398C7B0137DC908FB20F4DE1CC83774ABD6B10B7FC896A3C308531A913308128AEAEF0B4A39E6DCC93EDDC2FE038695972C7B8CB511536888C621C5EA3C20E4A5809DB7FE70988D64BE10DAF00CB5BA244034A57596A5868957E16E8C1A6722A3AEE1F7DF670CC87775DB9EA55FA2D44CD2FF43BF70EFB55505EBCC460A5FED91723F66F9A1D50421D675AF27F424E3F9D1F6005C68865C36051B6FCA4

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.