home

kurasshu.exe

Atlassian, Inc.

This file is installed with the program HipChat.
Publisher:
Atlassian, Inc.  (signed and verified)

MD5:
87e9ed8849dc1dc3f804d49ddf668383

SHA-1:
1b27f6cf5ae42389a6c228ce4a1b01d947d1003d

SHA-256:
f6966387f0a10930b1cd45346fdae1e65d24a81d8901db23dfa36e44fbfe268e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 6:15:23 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
10.14.12.00

File size:
69.5 KB (71,168 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\atlassian\hipchat\kurasshu.exe

Digital Signature
Signed by:
Atlassian, Inc.

Authority:
Atlassian, Inc.

Valid from:
11/28/2013 2:19:08 AM

Valid to:
11/26/2023 2:19:08 AM

Subject:
E=ops@hipchat.com, CN=hipchat.com, OU=HipChat, O="Atlassian, Inc.", L=San Francisco, S=California, C=US

Issuer:
E=ops@hipchat.com, CN=hipchat.com, OU=HipChat, O="Atlassian, Inc.", L=San Francisco, S=California, C=US

Serial number:
00E4B2AC4F48A0F42D

File PE Metadata
Compilation timestamp:
1/15/2014 7:02:21 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
768:/gYYYYW1yY4YX7YFdKf0hhQ79VJQAjsE+byjALKraOzER2:/TYYYW8Y4YX7Yo0rqhQAIUALBIO

Entry address:
0x66AC

Entry point:
E8, 63, 03, 00, 00, E9, 4B, FE, FF, FF, FF, 25, 1C, 01, 41, 00, FF, 25, 18, 01, 41, 00, FF, 25, 14, 01, 41, 00, 83, 3D, B4, F7, 40, 00, 00, 74, 03, 33, C0, C3, 56, 6A, 04, 6A, 20, FF, 15, C0, 00, 41, 00, 59, 59, 8B, F0, 56, FF, 15, 1C, 00, 41, 00, A3, B4, F7, 40, 00, A3, A4, F7, 40, 00, 85, F6, 75, 05, 6A, 18, 58, 5E, C3, 83, 26, 00, 33, C0, 5E, C3, 6A, 14, 68, 60, E0, 40, 00, E8, 50, 04, 00, 00, 83, 65, DC, 00, FF, 35, B4, F7, 40, 00, 8B, 35, 18, 00, 41, 00, FF, D6, 89, 45, E4, 83, F8, FF, 75, 0C, FF, 75...
 
[+]

Entropy:
4.4926

Code size:
39.5 KB (40,448 bytes)

The file kurasshu.exe has been discovered within the following program.

HipChat  by Atlassian
atlassian.hipchat.com
About 6% of users remove it
 
Powered by Should I Remove It?

Scan kurasshu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.