home

jre-windows.exe

Sun Microsystems, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from 192.168.1.2 and multiple other hosts.
Publisher:
Sun Microsystems, Inc.  (signed and verified)

MD5:
c9888d260a9f63a6ac48d625071232a1

SHA-1:
288dcc66f078ec99ae832073ef1408d2a0cdb92e

SHA-256:
53108f1fa3a1819143c7779f5333e7ecb6af78f68973a446dfd2b1f50d2535ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/17/2024 5:51:39 PM UTC  (today)

File size:
13.2 MB (13,801,120 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\jre-windows.exe

Digital Signature
Signed by:
Sun Microsystems, Inc.

Authority:
VeriSign, Inc.

Valid from:
6/13/2006 8:00:00 PM

Valid to:
7/15/2009 7:59:59 PM

Subject:
CN="Sun Microsystems, Inc.", OU=Sun Microsystems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sun Microsystems, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
29ABBFB304A781829FD1E62C773A4AFF

File PE Metadata
Compilation timestamp:
3/14/2007 8:14:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
393216:cyEW2MMxktFlIAIqlHFEpL9/VYbwA3i0W:i7x8F2AblyxpuvJW

Entry address:
0x54B6

Entry point:
6A, 60, 68, 98, F0, 40, 00, E8, EE, EA, FF, FF, BF, 94, 00, 00, 00, 8B, C7, E8, 42, ED, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, D0, E0, 40, 00, 8B, 4E, 10, 89, 0D, E4, 25, 41, 00, 8B, 46, 04, A3, F0, 25, 41, 00, 8B, 56, 08, 89, 15, F4, 25, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, E8, 25, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, E8, 25, 41, 00, C1, E0, 08, 03, C2, A3, EC, 25, 41, 00, 33, F6, 56, 8B, 3D, 28, E1, 40, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
7.9652

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
52 KB (53,248 bytes)

The file jre-windows.exe has been discovered within the following programs.

ThorpeForms  by ThorpeForms
Publisher's description - “By providing innovative and powerful legal software solutions, ThorpeForms has become an industry leader. Over 14,000 practitioners nationwide use our software today. Whatever type of law you practice, we have products that can help you operate more effectively. ”
www.ThorpeForms.com
About 3% of users remove it
 
Powered by Should I Remove It?

The file jre-windows.exe has been seen being distributed by the following 6 URLs.

http://192.168.1.2/C:/.../jre-windows.exe

http://laboratorioromandiaz.dyndns.org:9090/jre-6u1-windows-i586-p.exe

http://download.oracle.com/otn/java/jdk/.../jre-6u1-windows-i586-p.exe

http://www.electron.rmutphysics.com/program-download/.../j2re-1_3_1_18-windows-i586-i.exe

http://www.oldapps.com/java.php?app=c9888d260a9f63a6ac48d625071232a1

http://ool-4b7fc09c.static.optonline.net/C:/.../jre-windows.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.