home

jre8u25windowsx64.exe

Java Runtime Environment

Innovative Systems LLC

The application jre8u25windowsx64.exe by Innovative Systems has been detected as adware by 12 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from java.joydownload.com and multiple other hosts.
Publisher:
Innovative Systems LLC  (signed and verified)

Product:
Java Runtime Environment

Version:
1.0.0.0

MD5:
c3e5653a61946661be81fc487c25779e

SHA-1:
d492767d18a4ab7008598cd7a19c76f98d537474

SHA-256:
665c4f56ca9dc69271cc3f4bc51ccf3518db19148b5826d296d20bcc9d51f9b2

Scanner detections:
12 / 68

Status:
Adware

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/26/2024 12:20:52 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.OpenCandy
2014.11.17

Avira AntiVirus
APPL/Downloader.Gen
7.11.186.130

AVG
OpenCandy
2015.0.3287

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.141117

Clam AntiVirus
Win.Trojan.Agent-803351
0.98/21411

Dr.Web
Adware.OpenCandy.55
9.0.1.0321

ESET NOD32
Win32/JoyDownloader
8.10733

Malwarebytes
PUP.Optional.OpenCandy
v2014.11.17.12

McAfee
Artemis!C3E5653A6194
5600.6943

Reason Heuristics
PUP.InnovativeSystems.R
14.11.17.12

Trend Micro House Call
Suspicious_GEN.F47V1114
7.2.321

File size:
496.4 KB (508,296 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\jre8u25windowsx64.exe

Digital Signature
Signed by:
Innovative Systems LLC

Authority:
Thawte, Inc.

Valid from:
9/19/2014 4:00:00 AM

Valid to:
9/20/2015 3:59:59 AM

Subject:
CN=Innovative Systems LLC, O=Innovative Systems LLC, L=Dnepropetrovsk, S=Dnepropetrovska, C=UA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
09A91C40EAE34E72CD975B0B218AE4BA

File PE Metadata
Compilation timestamp:
5/20/2013 3:52:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:PQ912Q3oXIJPfcplPNGHt5BetTphYpYX1wpndVPV3:I91x3o4JPgP4bBetTTY06VPZ

Entry address:
0x331F

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, D8, 7A, 7A, 00, E8, A8, 2E, 00, 00, A3, 24, 7A, 7A, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, D0, EE, 79, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, 20, 6A, 7A, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 20, 7B, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Entropy:
7.7958

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

The file jre8u25windowsx64.exe has been seen being distributed by the following 44 URLs.

http://java.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHRD3aN3bveh152b0sDErn8kFbk3lYqn O2G3g15ZMmmeT7DkWOlmivwimNSWRAaV9T2iXQCmqnD8gffbvJ2cg2gIq5Q6kVRQXzWtCTRn0pp97CC5UGWTUr5eysPjNiUMK7M0JQpZbPOjAzhtc43EJREwjqPiAC1mcoH4w7tsUjyouRnFnv5mFsj/JcrrbXQbhp/.../rAQfh5MO6k1BifWDP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwydkKL0b1Y/j2O3mulg0EZ3GHWOOlGb8lmfs1zIOfAkvIoXunSwW/vn h3r2EvNKbm2BBs9Zp10dJDXymAX1/lsk7oWjoUSCTR7ZOj56/Y2hAK6s5bBIJOb2hCSYrLYzcLVgoj6v2ECQjao6x2 s/HDzy8gONye1nXZi8dMOmbHJZ3MC1FqounBcHrdGpn1O7ZKl/.../44JDmzR0nOmDP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv E8/yG6sGMxwdoEP0b1Y/j2O3mulg0EZ3GHWOOlGb8lmfs1zIOfAkvIoXunSwW/.../ksk7qHSmDjbbUrcfwsTrJTUFbqs5bBIMOb23Dy5tc43EJREwjqPmAC1mcoP4w7h9TjD450jExfVtAJO7cMSmb3Nb1IK3HOkujUlMrsih3BG9LPZnnG sB8VPtJb9Emvi8JuTkD55PuJRTsc3O3Uxsua1FllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHhnxZd7VtOh152b0sCgrn8kFbk3kYqn PXGuyxdSMWmeWLDzCr5uybhrh8yeDR7XpnvqBwX9vnGtiffTqtvZg2gIq5QwiUcWDTXnVm880YF17CC5UGeTUuYNjpbzPHQNarMga1wdOOz9V3BtedzFZREhhrO9S3I3c8b40 cnDG2ouRnFmvV Us3hJJfsfXof1cK3D smmQ8eroL5h0quN/.../rAQfh5MO6k1BifWDP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPTy1E1v4YdzZp7dvriWi8yE3iYccJgTtbLHuZSL6kUZTcWmOEfvjXKc8gLNhztScFQfS9SzyHgau7Gm0yP/SpMvak2FZqtY6h19QAi/7Xyx 18kr/yHoACHMSPlezYC4aWNYL/.../5nnHWsAsQe5MGxUSyh88jSzz4rPrxCQYU1OXoktOemFllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwydkKL0b1Y/j2O3mulg0EZ3GHWOOlGb8lmfs1zIOfAkvIoXunSwW/vn h3r2EvNKbm2BBs9Vp10dJF3ykACx3lsE79WjwXGmLFuMAnJKjJTxEYro4PRoNNb38FXB8ctyNf08wh/juEy1mcof4w7J2HGL5uF3Fjrg1WsbiN4G8ZDJW2cuvSKFkxl9A/.../44JDmzR0nOmDP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4coWK4fE9rm/8qHpwz8kFbk3kYqm6ZieuyxdSNGmeGeulHLc20bIjzsWXFU/Iqz3zVUz2szi1iP/D7oCMg2gIq5Y6kVdAVmSsSTRzntF/oXeuDyGLS/9Wy83zNTUBerJxJR4FIfq/FiM9LdzFfxEjiKDsEyMseIbx2q4/D2mwoA6W378wVdv4Mp68ZDJW28uvR7hizg8eroL5h0quN/.../rAQfh5MO6k1BifWDP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTqlChOxatrZp7VpsTGr4Hp5iNENJ1Xlar3uNDC2xl5KZyvMQqvyCr5uybhkxcOVAwWR9y3zT0z2uHGt36yS7oWJ2CYJ/Yc7wF9GXmT9W3gkhshq9CjwSCXAFK5Xi83nPSUFars2LRkdOOz9VXBtIZeaNBBhhqPuACQhao6x2 4/.../rAQfh5MO6k1BifWDP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL2as6J5KVn/.../ykZaMGWeEKqtG78lg A01s3eDQ b7S36DlT8 3G9geeV6svT0mlKq4cxkV4BXnWtGGcswNEivSH4UHGbRK5Xi83iPSVEMe0gJEEFMqS0XHh1apGNNBBhhqbuAGF8JtGtlq4nBSqwtlDdyqYwUYC2M8isbntOhYPoFawmmlpMs9yiyhuwaK5rwmTzEcQe5MGxUSyh88jSzz4rPrxCQYU1P3sjsuGnFllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTqlChOxat3Tv/FitCa /jk7jplSP0ykYr/2LSnthgVKOSCGGeO1R/YlyPpqw8yPQFXPq3C/.../YghSflCc1c5NXhASzh9pOV3XV M kEBsw7PWF2 Le1FllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPTy1E1v4YtbB6qAk5ib0pWJgjIJQeRigK6n3fHm6ykYObT/YTqu1E/Y9wLNyxsSbFQfS9S3yHgKzqnD8gfTbvNjKmiBBop8ixQwWRn3kADh/hsEr/C/4W3GSA7ZawtW0f3deKuwgJEEFMqv2XnJ ec/.../jFLqNOggn2mkBogEsJPkBDqhtZWOz2R1db0AT4c3Kzx65PCsRBBghVW61NdWU3W1FAawqZnu1Q0nPGDP9Q==

http://java.pl.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghr0cteQv E8/yG6sGMxwdoEP0b1Y/j2OXmulRwYayHZCeL ErQzwr5ixMSfAwuavCX7BlSu4S tgLbbrNPKk2dZqtY6h19QAi/7Xyx 18kr/yHoACHMSPlezYC4aWNYL/.../rAQfh5MO6k1BifWDP9Q==

http://java.pl.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymEBj3Z9nTt h152b0sCsrn8kFdE3mY/j2PnO20gABcSPQSqDiWuklyPpqwMyPXV3Xrj3zT0zxsmnp1KmF 5vKmiBBop8igVdERn3kADx/hodt7CC5UGKTUr1Ow4TrND0VMeBmPRNMOa39RHh7asWNLB8onve9TnM3c8b40 w/.../kSa0Ac1f6sW6UXKquZOaiHNjdb0AT4M3Kzh67rb4WllzhVW61NdWU3W1FAawqZnu1Q0nPGDP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXDyCf4UfO5CV530RJ0YyqsWxL2as6J5KVn/269qGt42ZtXeVXsK7H/NWG wlZKOSCGGOO1Qexj0bIjzsSXFQ6V7SS7BkT9qiT8mf6SpN7SgyQS/8FvxBZQXzWtDDRnwpx1qn64SGjaSr9W2sXjMSUMK7M0JQpae uFC9tc5fEJx8ji6bmFCAkeI6x2 k/HD/.../dl7xmBpO3YpjsOnkZ3cT6RLdwwFpWpY75kw2wO7h 1CakCd0ZqtWwAHPouYORiCdjbbVJV8dkbW0o6eimFllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv E8/yG6sGMxwdoEP0b1Y/j2PHmuhg0MIGjPEe tCrc1wb1ixdSWRAaS9T24VRLlszi1iP/DrNvag2gIq5M6kQMdCCLySCx 18kq9Dn4WGWLS/.../VuBZivKoD7ZzRe2obkQ7172F5d64zj2BCtfKE2nSqsEZoVrp75Fmvi6puRni0oZbNLTIM5MjwpseKtD044zVbshpQBUXDzDU75p5D2nV5jb2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghr0cteQv c8/zOn/j1gwJgEL0bteuG anv5wlEfaz3YRK7kULMz3ewokdSWRAaS9T2hVRLlszi1if/DrN3KmiBBoJU6kQEbFzb7W3cw1p879WjwXmmLGu0amdXqdD0BYqtnZ1hWcfrlXSN1ecrPLh8jj6HtEy1mcof4w6lxHGL5uFvFjv5 D9G3c8i8KSgIzcr F 8ujR8X74z/.../rAQfh5MO6k1BifWDP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmVx1NTqtCkexcteQv Q8/yKn/DwtjJgcJgTta7HueSro0l8bOGWGCeulGrE1wqtrh8ycBwaDq3a7TBqm8T791 fa7dPcm3ER8NNhkV4BXnKtGGgsyJY79WjwWGKTUuYenc kNTJAMedmcF9Me6nzSC83LdzFZREkhrOyTXpxLcfg2q4/DWOosFjJjvQvDpS3YpfmLygeitO2ROMlmxwS74n5il/.../lSa0R4tP5YSxQnP7soOb2SYjbaQaHNAvMjwpsui1Hx5zhVW61NdWU3W1FAawqZnu1Q0nPGDP9Q==

http://java.pt.joydownload.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHhzyZ9TWsuh152b0sDErn8kFbk3lYqn O2G3g15bOHHKQr21E/.../8FvxBZQXzWtDDRnwpx1qn64SGjaSr9W2sXjMSUMK7MxJQpPavvlXTl1e8TcJBkgnqqnGCUvasarhf8 V2O7uRnFnvV QNave4GkbntO3tO2XuMlnxcHudG zQSpJ 83yz6tQMVZ5NXhEj 4oZrTkCgqdeAaGdEvMjwpsuOtD0Aj2x711dgDSnK1WUqw65zg2Vpta2DP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU3NSr9Wk36Jd7W8rpouTq54SB0z8VbZRL1Y/j2PHmuhg0MIGjPEe tCrc1wb1ixdSWRAaS9T24VRLlszi1iP/DrNvag2gIq5c6kREGRn3kAD9/hsI79WjwWWmLGeUI2syiPTUNers2PRNMOan9RC83OJeMcwkp1avlFicje4D00O02BSqwtFDdyqAwUMf/YsntZXJWzcO/G/sv3BcU7YLv2QG7LvYk3mnkX91Wrc2/.../rBQfh4MOw1QR8NHPP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1Ghr0cteQv A8/yan9np5ktEPJgTtbLHuaSrglUZTcWmOGuO1Qvdiy/xiwYHEWVjOuGywCkLp7TPqmf6SpN/SgzYD4cxy1kdJDXymDj9ylMEh/iL/USCTQrZOl4TzPHQNb7MgaEFRZ/CwFWh0O8TNLAl71fX2GWUveo/.../IHiF2vi8JuWkD4iZbRHR4UvMjwpseKtD044zVbshpQBUXDzDU75p5D2nV5jb2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTqlChOxatrZp7Z rTy893p5ktEPKUbhab71OXO9yxdSNmmeTbD7Tac8gLNixcyPXU7E92r6CQGu5i/gzLaZqN3GxCses55ziVdIRjLjGDU2nsIj7CroUSCTQbxW2pO4dHdbOfB3bUQdOOz9UnBtIp Idwkpz6vnGDRmIdHg2rQ/.../Mz4SXvjoc7TiCdjbbFJV8NkZyt896G1FllriByigYIYR3mjFAawqZnu1Q0nOGDP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPTy1E1v4ZNbB47pquHf14WJwytEcdwWyYP7 OjTlngAHdSDEHe25Tf1i0bIjzsWXFUzIqz3zT0z0smm9iffDpZrSkmlZ4sxkkV4bXnesSTRzntF8tmujGDaLS VWycPgMTQHa7syKBNMOa73XGgrIY2OekpryeO4AC1mcoH4w7dkSDiouRnFmvV Us3hJJfsfXof1cK3D smmQ8eroL/.../Mz4SXvjoc7TiCdjbbFJV8NkZyt896G1FllrjRyikYQQASeiDAv5sZjmxQsnP2DP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv E8/yG6sGMxwdoEP0b1Y/j2PHmugA0MIGjPEeqtCrc1watrh8ybDR7Et2 hThPlsyK1ivHQqNjZkWpLpp5ziVFIRiD Vmtnn4Aj/CrwSDnbFbQZysKmbmlTN/5xZx4LLfq/A2h0O8TNLAl71fX2GWUveo/g0 knBSqwsVDd2qY4Fpn esSkfXNe3cW/HPsv3BcU7YLv2QG7LvYk3mnkX91Wrc2/.../rBQfh4MOw1QR8NHPP9Q==

http://java.pl.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTqlChOxat/Zp7pvuXf14WJwwckMKVXsK7H4NWHqmQgNIGjPEeumEqdtgexogcSYQFXPq3C/Tw7xvGXqw6DDpZrSl2lZ98ps1wAARn3kAD1/.../rAQfh5MO6k1BifWDP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yan9np5ktEPJgTta7HueSro0l8bOGWGCeulGrE1wqtrh8ycBwaDq3a7TBqm8T791 fa7dPcm3ER8NNhkV4BXnCtGGs91JprqznxA2mYRL1bwM/nMzYAY/o4LRIdd vlXTl1ecTcJwkpz6vgGDRzIdmnw Z2BGu7uEiV3qpkQZC4N5vwOy4bnIm7Gfdx10gH5sv3jlLqN/MhhSflCc1X/MW/.../O IWB5Y2enUguvClHxxzhVW61NdWU3W1FAawqZnu1Q0nPGDP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqlHBrzcteQv A8/.../hhvybKBn02i0CIxX782pQmvi8JuTkD55PuJRTsc3O3Uxsua1FllriByigYIYR3mjFAawqZnu1Q0nOGDP9Q==

http://java.es.joydownload.com/get_azure_file/wUiS4WnYccXBwj qXP7oQkEsm10kPTqlChOxat/Zp6VvuXf14WJ0wckML0XjarruNDC2xl5KZDzQT7zlCr50ybpq1sSfAR6avCX5DEzl7CL8y6mA55yazXFA4p80iUcYBTD2GDU2nsEj7G SGjaSr1W2sbzPHQNa7MgdkFbIaS0XHh1aszKNBBhhqXuAHB8JNDg2q4/.../5nnHWsAsQe5MWxUSaqoZrTkCsqdfEaG9Bifjwxu6GtGxBz217wjp8RASe4DAz3opzlxwwgOnPP9Q==

http://java.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU3NSr9Wk36Jd7W8rpouTq54SB0z8VbZRL1Y/j2PHmuhg0MIGjPEe tCrc1wb1ixdSWRAaS9T24VRLlszi1iP/DrNvag2gIq5Y6kRYbAGSsUzR0n4Aj/CHoBSCLS/9Wz83zcG5ZPOZ1bAoEcKXxXGgqMI6XZE4wh/.../44JDmzR0nOmDP9Q==

http://java.pl.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpyK4fE9rm/9qHpwydkcJgTtabv2LSflgxQEYyrJWbW1E/Y9x7NynpfbVh6avCX BlSi8DvmyaDDpYDSkGdKp503g1ZBVX3kADx/hpxq7CC5UGSTUvsFlpO cHQVY/o4LBIddfajRHE8csjENBkgjqXmEzQuO4/02/9jUTXu5xjdl7xmB5ivcsCofXof1cK3D7B9yw8eroL/.../rBQfh4MOw1QR8NHPP9Q==

http://java.ar.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhr4coOQp h152L0sC8rlY9RagT1Y/.../ctClLHtf1dP7RL02lF4f64Lvj1r6aqh0hSflCc5d5NXvGjqp78DZ3258db0AT4A3KyVy9rO1FllriByigYIYR3mjFAawqZnu1Q0nOGDP9Q==

Latest 30 of 44 download URLs

Remove jre8u25windowsx64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.