PE Compile Time

2015-12-02 14:37:10

PE Imphash

e2460f2a89f0d9e11c6b2d37b62a82b4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0001f86c 0x0001fa00 6.46924739019
.rdata 0x00021000 0x0000bfaa 0x0000c000 5.538295988
.data 0x0002d000 0x00010fe8 0x0000e400 7.54276501141
.pdata 0x0003e000 0x00001404 0x00001600 4.94132820641
.rsrc 0x00040000 0x00008380 0x00008400 6.05152933022
.reloc 0x00049000 0x000005e0 0x00000600 5.38936792657

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON 0x000472f8 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_GROUP_ICON 0x00047760 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00047810 0x00000338 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00047b48 0x00000835 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with very long lines (2101), with no line terminators

Imports

Library USER32.dll:
0x1400212f0 MessageBoxA
0x1400212f8 CharNextExA
Library COMCTL32.dll:
0x140021000 InitCommonControlsEx
Library KERNEL32.dll:
0x140021010 SetEndOfFile
0x140021018 TlsGetValue
0x140021020 GetCommandLineA
0x140021028 CloseHandle
0x140021030 GetLastError
0x140021038 QueryPerformanceCounter
0x140021048 WaitForSingleObject
0x140021050 GetExitCodeThread
0x140021058 GetModuleFileNameA
0x140021060 GetModuleHandleA
0x140021068 GetProcAddress
0x140021070 LoadLibraryA
0x140021078 FindClose
0x140021080 FindFirstFileA
0x140021088 FindNextFileA
0x140021090 EncodePointer
0x140021098 DecodePointer
0x1400210a0 ExitProcess
0x1400210a8 GetModuleHandleExW
0x1400210b0 AreFileApisANSI
0x1400210b8 MultiByteToWideChar
0x1400210c0 WideCharToMultiByte
0x1400210c8 EnterCriticalSection
0x1400210d0 LeaveCriticalSection
0x1400210d8 HeapFree
0x1400210e0 HeapAlloc
0x1400210e8 HeapReAlloc
0x1400210f0 IsDebuggerPresent
0x140021100 GetCurrentProcessId
0x140021108 SetFilePointerEx
0x140021110 CreateThread
0x140021118 GetCurrentThreadId
0x140021120 ExitThread
0x140021128 LoadLibraryExW
0x140021130 RtlUnwindEx
0x140021138 DeleteCriticalSection
0x140021140 RtlCaptureContext
0x140021148 RtlLookupFunctionEntry
0x140021150 RtlVirtualUnwind
0x140021158 UnhandledExceptionFilter
0x140021168 SetLastError
0x140021178 Sleep
0x140021180 GetCurrentProcess
0x140021188 TerminateProcess
0x140021190 TlsAlloc
0x140021198 TlsSetValue
0x1400211a0 TlsFree
0x1400211a8 GetStartupInfoW
0x1400211b0 GetModuleHandleW
0x1400211b8 GetStdHandle
0x1400211c0 WriteFile
0x1400211c8 GetModuleFileNameW
0x1400211d0 IsValidCodePage
0x1400211d8 GetACP
0x1400211e0 GetOEMCP
0x1400211e8 GetCPInfo
0x1400211f0 GetProcessHeap
0x1400211f8 GetFileType
0x140021200 GetSystemTimeAsFileTime
0x140021208 GetEnvironmentStringsW
0x140021210 FreeEnvironmentStringsW
0x140021218 FlushFileBuffers
0x140021220 GetConsoleCP
0x140021228 GetConsoleMode
0x140021230 SetStdHandle
0x140021238 ReadFile
0x140021240 ReadConsoleW
0x140021248 FindFirstFileExW
0x140021250 GetDriveTypeW
0x140021260 FileTimeToSystemTime
0x140021268 SetEnvironmentVariableA
0x140021270 SetEnvironmentVariableW
0x140021278 GetFileAttributesExW
0x140021280 OutputDebugStringW
0x140021288 HeapSize
0x140021290 CompareStringW
0x140021298 LCMapStringW
0x1400212a0 GetStringTypeW
0x1400212a8 WriteConsoleW
0x1400212b0 FileTimeToLocalFileTime
0x1400212c0 PeekNamedPipe
0x1400212c8 GetFullPathNameW
0x1400212d0 GetCurrentDirectoryW
0x1400212d8 CreateFileW
0x1400212e0 VirtualAlloc

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
@USVWAVH
jsrjsr
D$,+D$4
H99t#H9y
WAVAWH
A_A^_
WAVAWH
A_A^_
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
5ukD9>ufH
LD9>tG
D9>u>H
A_A^_
UVWATAUAVAWH
0A_A^A]A\_^]
@USVWAVAWH
9\$@~%3
A_A^_^[]
@USVWATAUAVAWH
hA_A^A]A\_^[]
WAVAWH
0A_A^_
WAVAWH
A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
H!l$(H
H+D$ H
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
WAVAWH
0A_A^_
WATAUAVAWH
tP<cuLH
A_A^A]A\_
\$ UVWATAUAVAWH
`A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWAVAWH
A_A^_^[]
u8L;L$`t
H9D$`u*L;T$ht
D$(!\$
WATAUAVAWH
A_A^A]A\_
@SUVWATAUAVAWH
D$@D91
A_A^A]A\_^][
H SVWH
L$ SWH
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
|$hH9y
l$hI;o
A_A^A]A\_^]
USVWATAUAVAWH
OH;H(s
OH;H8s
XA_A^A]A\_^[]
w@D9G,u"A;\$
G|;Gpr
L9s8u!
C4;C,A
C0;C,s
UVWATAUAVAWH
A_A^A]A\_^]
L$$u E;
@SUVWATAUAVAWH
(A_A^A]A\_^][
WATAUAVAWH
@A_A^A]A\_
AUAVAWH
0A_A^A]
|$ ATAVAWH
A_A^A\
fffffff
|$ AVH
L$ UVWATAUAVAWH
A_A^A]A\_^]
@SVWAVAWH
0A_A^_^[
H SVWAVH
(A^_^[
ATAVAWH
A_A^A\
L$ USWH
UVWATAVH
0A^A\_^]
VWATAVAWH
A_A^A\_^
t$ WAVAWH
0A_A^_
UVWATAUAVAWH
D$DD9T$X
|$h+t$D+
A_A^A]A\_^]
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
t$ WAVAWH
LcA<E3
ATAVAWH
A_A^A\
WAVAWH
A_A^_
t$ WATAUAVAWH
D!l$h3
0A_A^A]A\_
l$ VWATAVAWH
T$&@8t$&t9@8r
A81t@@8r
A_A^A\_^
` AUAVAWH
t$8Hc0I
\$0D9=
A_A^A]
Hct$@H
sYHcL$HH
x ATAVAWH
A_A^A\
H3E H3E
VWATAVAWH
A_A^A\_^
\$ UVWATAUAVAWH
D9l$dtXH
HcD$PH;
HcD$PH;
A_A^A]A\_^]
` AUAVAWH
0A_A^A]
VWAUAVAWH
0A_A^A]_^
WATAUAVAWH
A_A^A]A\_
USVWATAUAVAWH
8UXt$@
XA_A^A]A\_^[]
utfD9K
tmfD9C
UVWATAUAVAWH
D9d$tu
D9d$xu
G D9d$lu
D9d$pu
D9d$du
D9d$hu
D9d$|t
A_A^A]A\_^]
UVWATAUAVAWH
D)\$4A;
t$\9D$`t
D8|$0u
D9|$pt
t$PD8|$8t
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
D9t$htrH
WATAUAVAWH
0A_A^A]A\_
D9t$htpH
@8t$8t
WATAUAVAWH
gfffffffH
D8L$Ht
A_A^A]A\_
x AUAVAWH
A_A^A]
@SUVWH
@SUVWH
@SUVWAVH
A^_^][
@USVWATAUAVAWH
eHA_A^A]A\_^[]
@SUVWATAVAWH
PA_A^A\_^][
@UATAUAVAWH
!t$(H!t$ I
A_A^A]A\]
@UATAUAVAWH
A_A^A]A\]
D82u&H
D8t$Ht
VWATAVAWH
A_A^A\_^
t#HcL$@H
D$(A9h
@8l$8t
r"fD;A
@8l$8t
t$ WATAUAVAWH
G 9\$tu
A_A^A]A\_
@USVWATAUAVAWH
xA_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@8l$Ht
fD93tSH
CfD93u
@USVWH
p WAVAWH
SVWATAUAVAWH
PA_A^A]A\_^[
uAiD$P
@SUVWAVH
@A^_^][
x AUAVAWH
A_A^A]
@8l$8t
HcD$hH
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WATAVH
t"HcM@H
Unknown
Main class
JAR file
_JAVA_LAUNCHER_DEBUG
Windows original main args:
wwwd_args[%d] = %s
9-ea+95-2015-12-02-040230..3968.nc
malloc
realloc
strdup
----%s----
classpath
Xdisable-@files
Error: could not open `%s'
Error: Argument file size should not be larger than %lu.
Error: loading: %s
NMT_LEVEL_
-Djava.class.path=%s
Command line args:
argv[%d] = %s
-Dsun.java.launcher.diag=true
%ld micro seconds to LoadJavaVM
CLASSPATH
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.
Error: Could not detach main thread.
Error: A JNI error has occurred, please check your installation and try again
%ld micro seconds to InitializeJVM
%s is '%s'
App's argc is %d
argv[%2d] = '%s'
Error: A JNI error has occurred, please check your installation and try again
([Ljava/lang/String;)V
JDK_ALTERNATE_VM
-classpath
-XXaltjvm=
-J-XXaltjvm=
Default VM: %s
Error: Corrupt jvm.cfg file; cycle in alias list.
Error: Unable to resolve VM alias %s
Warning: %s VM not supported; %s VM will be used
Error: %s VM not supported
-version
-fullversion
-XX:NativeMemoryTracking=
%s%d=%s
TRACER_MARKER: NativeMemoryTracking: env var is %s
TRACER_MARKER: NativeMemoryTracking: putenv arg %s
TRACER_MARKER: NativeMemoryTracking: got value %s
_JAVA_VERSION_SET
-version:
Error: Specifying an alternate JDK/JRE version is no longer supported.
The use of the flag '-version:' is no longer valid.
Please download and execute the appropriate version.
-jre-restrict-search
Error: Specifying an alternate JDK/JRE is no longer supported.
The related flags -jre-restrict-search | -jre-no-restrict-search are also no longer valid.
-jre-no-restrict-search
-Djava.awt.headless=true
-Djava.awt.headless=
-splash:
Error: Unable to access jarfile %s
Error: Invalid or corrupt jarfile %s
_JAVA_SPLASH_FILE=
_JAVA_SPLASH_JAR=
Error: %s requires class path specification
Error: %s requires jar file specification
-showversion
-XshowSettings
-XshowSettings:
-Xdiag
%s full version "%s"
-verbosegc
-verbose:gc
-debug
-Xdebug
-noclassgc
-Xnoclassgc
-Xfuture
-Xverify:all
-verify
-verifyremote
-Xverify:remote
-noverify
-Xverify:none
-checksource
-noasyncgc
Warning: %s option is no longer supported.
JavaVM args:
version 0x%08lx,
JNI_TRUE
JNI_FALSE
ignoreUnrecognized is %s,
nOptions is %ld
option[%2d] = '%s'
sun/launcher/LauncherHelper
(Z[B)Ljava/lang/String;
makePlatformString
java/lang/String
(ZILjava/lang/String;)Ljava/lang/Class;
checkAndLoadMain
%ld micro seconds to load main class
()Ljava/lang/Class;
getApplicationClass
Error: The -J option should not be followed by a space.
-Denv.class.path=%s
Error: Could not determine application home.
-Dapplication.home=%s
-Djava.class.path=
-Dsun.java.command=
-Dsun.java.launcher=SUN_STANDARD
sun/misc/Version
println
(ZLjava/lang/String;JJJZ)V
showSettings
printXUsageMessage
(Ljava/lang/String;)V
initHelpMessage
(Ljava/lang/String;Ljava/lang/String;)V
appendVmSelectMessage
appendVmSynonymMessage
(ZLjava/lang/String;)V
appendVmErgoMessage
printHelpMessage
Warning: No leading - on line %d of `%s'
Warning: Missing VM type on line %d of `%s'
ALIASED_TO
IGNORE
IF_SERVER_CLASS
Warning: Missing server class VM on line %d of `%s'
Warning: Unknown VM type on line %d of `%s'
jvm.cfg[%d] = ->%s<-
VM_ALIASED_TO
name: %s vmType: %s alias: %s
VM_IF_SERVER_CLASS
name: %s vmType: %s server_class: %s
%ld micro seconds to parse jvm.cfg
_JAVA_SPLASH_JAR
_JAVA_SPLASH_FILE
Launcher state:
First application arg index: %d
debug:%s
javargs:%s
program name:%s
launcher name:%s
javaw:%s
fullversion:%s
ergo_policy:
NEVER_ACT_AS_A_SERVER_CLASS_MACHINE
ALWAYS_ACT_AS_A_SERVER_CLASS_MACHINE
DEFAULT_ERGONOMICS_POLICY
META-INF/MANIFEST.MF
Manifest-Version
Main-Class
JRE-Version
Splashscreen-Image
\bin\splashscreen.dll
-J-d64
-J-d32
Error: This Java instance does not support a %d-bit JVM.
Please install the desired version.
Error: Could not find Java SE Runtime Environment.
%s%slib%s%s%sjvm.cfg
Error: no known VMs. (check for corrupt jvm.cfg file)
Error: could not determine JVM type.
Error: missing `%s' JVM at `%s'.
Please install or use the JRE or JDK that contains these missing components.
-Dsun.awt.warmup
-Dsun.java2d.noddraw
-Dsun.java2d.d3d
-Dsun.java2d.opengl
msvcr120.dll
Error: Path length exceeds maximum length (PATH_MAX)
\bin\msvcr120.dll
CRT path is %s
msvcp120.dll
\bin\msvcp120.dll
PRT path is %s
%s\bin\java.dll
JRE path is %s
Insufficient space to store JRE path
%s\jre\bin\java.dll
Error: could not find java.dll
%s\jvm.dll
%s\bin\%s\jvm.dll
JVM path is %s
JNI_CreateJavaVM
JNI_GetDefaultJavaVMInitArgs
Error: can't find JNI interfaces in: %s
Java Virtual Machine Launcher
A Java Exception has occurred.
J2D_D3D
J2D_D3D_PRELOAD
preloadD3D
jvm.dll
JVM_FindClassFromBootLoader
\bin\verify.dll
\bin\java.dll
\bin\awt.dll
preloadStop
Warning: app args is larger than the original, %d %d
passing arguments as-is.
Warning: app args parsing error
passing arguments as-is
([Ljava/lang/String;)[Ljava/lang/String;
expandArgs
Expanded wildcards:
before: "%s"
after : "%s"
SplashLoadMemory
SplashLoadFile
SplashInit
SplashSetFileJarName
SplashSetScaleFactor
SplashGetScaledImageName
incorrect header check
unknown compression method
invalid window size
unknown header flags set
header crc mismatch
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid code lengths set
invalid bit length repeat
invalid code -- missing end-of-block
invalid literal/lengths set
invalid distances set
invalid literal/length code
invalid distance code
invalid distance too far back
incorrect data check
incorrect length check
Qkkbal
[-&LMb#{'
w+OQvr
INSKyu
)\ZEo^m/
H*0"ZOW
mj>zjZ
IiGM>nw
ewh/?y
OZw3(?
V_:X1:
need dictionary
stream end
file error
stream error
data error
insufficient memory
buffer error
incompatible version
inflate 1.2.8 Copyright 1995-2013 Mark Adler
CorExitProcess
RoInitialize
RoUninitialize
(null)
`h````
xpxxxx
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleExW
SetFileInformationByHandleW
No error
Operation not permitted
No such file or directory
No such process
Interrupted function call
Input/output error
No such device or address
Arg list too long
Exec format error
Bad file descriptor
No child processes
Resource temporarily unavailable
Not enough space
Permission denied
Bad address
Unknown error
Resource device
File exists
Improper link
No such device
Not a directory
Is a directory
Invalid argument
Too many open files in system
Too many open files
Inappropriate I/O control operation
File too large
No space left on device
Invalid seek
Read-only file system
Too many links
Broken pipe
Domain error
Result too large
Resource deadlock avoided
Filename too long
No locks available
Function not implemented
Directory not empty
Illegal byte sequence
`h`hhh
xppwpp
UTF-16LE
UNICODE
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
CreateFile2
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#SNAN
1#QNAN
RSDS]FM
c:\workspace\9-2-build-windows-amd64-cygwin-phase2\jdk9\3968.nc\build\windows-x64\support\native\java.base\javaw_objs\javaw.pdb
CharNextExA
MessageBoxA
USER32.dll
InitCommonControlsEx
COMCTL32.dll
GetCommandLineA
CloseHandle
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FindClose
FindFirstFileA
FindNextFileA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcessId
SetFilePointerEx
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
RtlUnwindEx
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
ReadFile
ReadConsoleW
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileAttributesExW
OutputDebugStringW
HeapSize
CompareStringW
LCMapStringW
GetStringTypeW
WriteConsoleW
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameW
GetCurrentDirectoryW
CreateFileW
VirtualAlloc
SetEndOfFile
KERNEL32.dll
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
[T^D2/
)iIP2g?m
ADcE D
TQB)Ck@
eA2]`(
b;ce.g}
C7F/Yo
-jb'NV
RRB;)tY
8zqm}]6
u$#8et
=N)f[3f
7_3NS
+;2#~C
jZLJ;Bk
QmeyBy
?ZD<GI
M":M}O
d2:-m_
0qN7_R
$e^7_R
*yX"SG
R?2{F$U
u(b%)3h
dt:uy&/
T&gZ:H
7N0q]-=
Au5lv7
k=Jo~-
@&|+3&g
{MI9Di
'.8<OT
_pa`=Y
T-,iMx
x_5:Vb
Ifg~QT*
nV'HE
EG{kjd{R
lz&'v_
mfe8N{
2NIfn?
=:V_|u*
q?KGU`
ltK1\a
:'VWVC
Gs+QzH
>1qqqqmJ
YYYYYYUR
ltttrq
nnnnnnnnN
***"""
::2666
lll,,,
SSSSSS
Assssc+R
\(&222P
8888V9
[[[[[[[
$s{{{#
9%.bVX
5<;:%i-
M6=iMIv
\llllb%
@x.%UM
BbJ\WV)Q
GGGGy=
zyyu+o
5uuue-
{????
]uuuua
CCC##(
**(!%$$
220)-,,
RRPIBC;
ttrcefVX
kvtejii^_
h{999 (*
ooooooooooooAZ
333333333333333333330
wwwwwww
wwwwwwwwwww
wwwwwwx
wwwwwww
wwwwwwwx
3333333333330
wwwwwx
333333333307
3333330x
------
3YYYYii@
`iiiiiiiiiiiiiiiiiii
MTiiiiiYYY3
3iiiiiiL
iiiiiii
ziiiiiii3
s3iiiizzzzz
Tzzzzzz
zzzzzziii3ss
zzzzzzzzzzzzzT
zzzzzzzzzzzzzzzz
zzzzzzzzzzzzz`
zzzzzzzzzzzzzzzzz
zzzzzzzzzzzzzzT
zzzzzzzzzzzzz
zzzzzzzzzzzzzz
zzzziiiiiiiiiL
iiiiiiiizzz
iiiiiiiiiiiip;6
iiiiiiiiii
*[3iiiiiiiiiiiic
;wiiiiiiii3[[3iiiiiiiiiiii-
QiiiiiiiiiiiL
iiiizj
iiiiiii3[X3iiiiYYYYYYYYYz!TTTTTT
YYYYYYYYY
YYYYiii3X&3YYYY
YYY3&&3
#MMD]L
((((((((((((((K
>(N+RI
((((((((((((((((((
((((((((((((((V.
(((((((((((((((((((
i(((((((((((((((gu
(((((((((((((((((((i
i(((((((((((((((=
1=((((((((((((((((((i
Y(((((((((((((((($
(((((((((((((((((Y
Z$gwjjjjjjjjjjjjjjjjjjjjwg$Z
+]J8gwjjj
jjjjjwg8
jjjjw\
5wwwwar<P@+
wwwww5
5wwwwws
wwwww5
E\++++++++%
U++++++++++\Ef\++++++++|4D
>OUs@@z
+++++++\f=\wwwwwwwKlrBkkB7
6Kwwwww\=t5wwwwwwwKWR%2&&2O
;rwwwww5t
5jjjjjw@s
jjjjj5
jjjjjs
jj;jjjjj
jjjjj@6r0
PP%d(jjjjj
NNNNNNNNN
AVNNNNNNNNN
w,,,,,,,,,
,,,,,,,,,,,,w
<w,,,,,,,,,
}',,,,,,,,,,,w<
j,,,,,,,,,,'n
)3nn~,,,,,,,,,,j
TTTTTTTTTTTTT
TTTTTTTTT
TTTTTTTTTTTTTT
^TTTTTTTTT
TTTTTTTTTTTTTTT{iTTTTTTTTT
TTTTTTTTTTTTTTTTTTTTTT
,,,,,,,,,,,,,,,,,,,,
]]]]]]]]]]]]]]]]]]]]]]]]]
T#/////
/&7$$H///
333O"B
@@OG0O@@@@
@@@@O0
.....@3?
@......
......
4@......
LLLLLLL
LLLLLL
LLLLLLLLL
LLLLLLLL
X6N]WWWWWWWWWWWWWWWWWWWWWW]
!!!!!!!!!!!8
!+%

:'''''''''''''':
mW73mW7
nX9foY:
pZ:!q[;
pZ:!q[<x
q[<xr]>
nX9@nX9
pZ;@vfN
r]>@vfO
r]>@u_@
r\=hr\=
r\=hwaB
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity name="javaw.exe" version="9.0.0.0" processorArchitecture="X86" type="win32"></assemblyIdentity><description>Java(TM) SE process</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><asmv3:application><asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"><dpiAware>true</dpiAware></asmv3:windowsSettings></asmv3:application><ms_compatibility:compatibility xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" xmlns="urn:s
#+3;CScs
@@mscoree.dll
combase.dll
(null)
kernel32.dll
- floating point support not loaded
- not enough space for arguments
- not enough space for environment
- abort() has been called
- not enough space for thread data
- unexpected multithread lock error
- unexpected heap error
- unable to open console device
- not enough space for _onexit/atexit table
- pure virtual function call
- not enough space for stdio initialization
- not enough space for lowio initialization
- unable to initialize heap
- CRT not initialized
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- not enough space for locale information
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- inconsistent onexit begin-end variables
DOMAIN error
SING error
TLOSS error
runtime error
Runtime Error!
Program:
<program name unknown>
Microsoft Visual C++ Runtime Library
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
USER32.DLL
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
((((( H
((((( H
CONOUT$
VS_VERSION_INFO
StringFileInfo
000004b0
CompanyName
Oracle Corporation
FileDescription
Java(TM) Platform SE binary
FileVersion
Full Version
9-ea+95-2015-12-02-040230..3968.nc
InternalName
LegalCopyright
Copyright
OriginalFilename
javaw.exe
ProductName
Java(TM) Platform SE 9
ProductVersion
VarFileInfo
Translation
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_90% (W)
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Agent.DML.gen
APEX Malicious
Avast Clean
Cynet Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Win64.Trojan.Agent.Bkjl
Sophos Generic Reputation PUA (PUA)
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD ti!915F890EDF0B
Trapmine Clean
CTX Clean
Emsisoft Clean
Ikarus Trojan.Win64.Agent
GData Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!922B7AE65400
TACHYON Clean
VBA32 Clean
Malwarebytes Generic.Malware/Suspicious
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Backdoor.Lotok!8.111D5 (TFE:2:X4N1blCauRP)
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W64/Agent.DML!tr
AVG Clean
DeepInstinct MALICIOUS
alibabacloud Trojan:Win/Wacapew.C9nj
IRMA Signature
Trend Micro SProtect (Linux) Clean
Avast Core Security (Linux) Win64:Evo-gen [Trj]
C4S ClamAV (Linux) Clean
Trellix (Linux) Clean
Sophos Anti-Virus (Linux) Clean
Bitdefender Antivirus (Linux) Clean
G Data Antivirus (Windows) Clean
WithSecure (Linux) Trojan.TR/Agent.gemeb
ESET Security (Windows) a variant of Win64/Agent.DML.gen trojan
DrWeb Antivirus (Linux) Trojan.Siggen31.15192
ClamAV (Linux) Clean
eScan Antivirus (Linux) Clean
Kaspersky Standard (Windows) HackTool.Win64.AmsiETWPatch.hxm
Emsisoft Commandline Scanner (Windows) Clean
Cuckoo

We're processing your submission... This could take a few seconds.