agenttesla | SpyLogger[.]V1[.]1[.]rar

resource	yara_rule
static1/unpack001/SpyLogger V1.1/Guna.UI2.dll	family_agenttesla

resource	yara_rule
static1/unpack001/SpyLogger V1.1/SpyLoger.exe	themida

resource
unpack001/SpyLogger V1.1/MetroSet UI.dll
unpack001/SpyLogger V1.1/SpyLoger.exe
unpack001/SpyLogger V1.1/res/bin/JAWTAccessBridge-64.dll
unpack001/SpyLogger V1.1/res/bin/JavaAccessBridge-64.dll
unpack001/SpyLogger V1.1/res/bin/WindowsAccessBridge-64.dll
unpack001/SpyLogger V1.1/res/bin/attach.dll
unpack001/SpyLogger V1.1/res/bin/awt.dll
unpack001/SpyLogger V1.1/res/bin/dt_shmem.dll
unpack001/SpyLogger V1.1/res/bin/dt_socket.dll
unpack001/SpyLogger V1.1/res/bin/fontmanager.dll
unpack001/SpyLogger V1.1/res/bin/freetype.dll
unpack001/SpyLogger V1.1/res/bin/hprof.dll
unpack001/SpyLogger V1.1/res/bin/instrument.dll
unpack001/SpyLogger V1.1/res/bin/j2pcsc.dll
unpack001/SpyLogger V1.1/res/bin/j2pkcs11.dll
unpack001/SpyLogger V1.1/res/bin/jaas_nt.dll
unpack001/SpyLogger V1.1/res/bin/jabswitch.exe
unpack001/SpyLogger V1.1/res/bin/java-rmi.exe
unpack001/SpyLogger V1.1/res/bin/java.dll
unpack001/SpyLogger V1.1/res/bin/java.exe
unpack001/SpyLogger V1.1/res/bin/java_crw_demo.dll
unpack001/SpyLogger V1.1/res/bin/javaw.exe
unpack001/SpyLogger V1.1/res/bin/jawt.dll
unpack001/SpyLogger V1.1/res/bin/jdwp.dll
unpack001/SpyLogger V1.1/res/bin/jjs.exe
unpack001/SpyLogger V1.1/res/bin/jli.dll
unpack001/SpyLogger V1.1/res/bin/jpeg.dll
unpack001/SpyLogger V1.1/res/bin/jsdt.dll
unpack001/SpyLogger V1.1/res/bin/jsound.dll
unpack001/SpyLogger V1.1/res/bin/jsoundds.dll
unpack001/SpyLogger V1.1/res/bin/keytool.exe
unpack001/SpyLogger V1.1/res/bin/kinit.exe
unpack001/SpyLogger V1.1/res/bin/klist.exe
unpack001/SpyLogger V1.1/res/bin/ktab.exe
unpack001/SpyLogger V1.1/res/bin/lcms.dll
unpack001/SpyLogger V1.1/res/bin/management.dll
unpack001/SpyLogger V1.1/res/bin/mlib_image.dll
unpack001/SpyLogger V1.1/res/bin/net.dll
unpack001/SpyLogger V1.1/res/bin/nio.dll
unpack001/SpyLogger V1.1/res/bin/npt.dll
unpack001/SpyLogger V1.1/res/bin/orbd.exe
unpack001/SpyLogger V1.1/res/bin/pack200.exe
unpack001/SpyLogger V1.1/res/bin/policytool.exe
unpack001/SpyLogger V1.1/res/bin/rmid.exe
unpack001/SpyLogger V1.1/res/bin/rmiregistry.exe
unpack001/SpyLogger V1.1/res/bin/sawindbg.dll
unpack001/SpyLogger V1.1/res/bin/server/jvm.dll
unpack001/SpyLogger V1.1/res/bin/servertool.exe
unpack001/SpyLogger V1.1/res/bin/splashscreen.dll
unpack001/SpyLogger V1.1/res/bin/sunec.dll
unpack001/SpyLogger V1.1/res/bin/sunmscapi.dll
unpack001/SpyLogger V1.1/res/bin/tnameserv.exe
unpack001/SpyLogger V1.1/res/bin/unpack.dll
unpack001/SpyLogger V1.1/res/bin/unpack200.exe
unpack001/SpyLogger V1.1/res/bin/verify.dll
unpack001/SpyLogger V1.1/res/bin/w2k_lsa_auth.dll
unpack001/SpyLogger V1.1/res/bin/zip.dll

SpyLogger.V1.1.rar

SHA256 92fbeb1ebe6e1e2efe646431d2b1035103c81f7f6a9fd63e1792aed53eb187ef
MD5 4f9471af75fcc67e09a9960c9e857364
SHA1 b795e62c23b0ca9656b398af9fbde402b6f5a323
SHA512 47decf92f501b15b7fb63c23db90147f572621bdab596d8e0b4ab39eb92ce74f87ebbea5c747c6363257ab8abfb6ec837108824600b7c4c69f6605d47567a483
SSDEEP 1572864:M+Abr5URDKMKieOF/2vkMYBAHTRg/pIMHFy/hh6:TVROMfeOJM4+HG/f86
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/Guna.UI2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd
MD5 c97f23b52087cfa97985f784ea83498f
SHA1 d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89
SHA512 ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512
SSDEEP 49152:cvrqKk8q2gqi2OXCt6kuSw9g8PTNTN/23uxjPHEiCAjFcm:cvrqZr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

AgentTesla payload

PE Signature issue

Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Sobatdata Software

Chains

Nov 25, 2023

Minor OS version

0

Major OS version

4

Entry point

2151934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

SpyLogger V1.1/MetroSet UI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba
MD5 d99a97de55b2561e57135433b44bb786
SHA1 ab588b8d36683b52adcb32c03a9859b884838f29
SHA512 7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c
SSDEEP 6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

451814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\MetroSet-UI-master\MetroSet-UI-master\MetroSet UI\obj\Release\net45\MetroSet UI.pdb

SpyLogger V1.1/Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 8, 2023

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

704578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

SpyLogger V1.1/Newtonsoft.Json.xml

SHA256 79ee87d4ede8783461de05b93379d576f6e8575d4ab49359f15897a854b643c4
MD5 d398ffe9fdac6a53a8d8bb26f29bbb3c
SHA1 bffceebb85ca40809e8bcf5941571858e0e0cb31
SHA512 7db8aac5ff9b7a202a00d8acebce85df14a7af76b72480921c96b6e01707416596721afa1fa1a9a0563bf528df3436155abc15687b1fee282f30ddcc0ddb9db7
SSDEEP 6144:XqqU+k/Rik5aG0rH3jGHdl0/IdHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DU1
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/SpyLoger.exe

SHA256 b551d6d3e81670207ac441d381838668cfa45f52eb8580b06ae2ef0ab650068f
MD5 56be9f99f51664cc278e9f5e697b1f58
SHA1 486eda1b83969b8b2a14501823138ab913746fd4
SHA512 2f61a86589c54992c61faf2a7e45f5e2dd88090f1a1c32c3b8b45129d10140220539f417bfc37551a007c713497752cc738c8be4b828b54ab98f58b3158bfce5
SSDEEP 786432:M2DqByHNcRII4YzCTuWp+XB8VeddanYL2d3/Mnwm3/7h1JG:lgyhzTus+yod0YZjhe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Themida packer

Detects Themida, an advanced Windows software protection system.

themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30900400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

23.7MB

Virtual Size

23.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

6KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.themida

Size

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

SpyLogger V1.1/SpyLoger.exe.config

SHA256 1b377636adae14c152a57f0eeefc21afa858b1bfbfd9cacd2109ecdd9c6b68b6
MD5 6513394dda2fce41cd8d4f4806255fcf
SHA1 d30896140a14e658dbfe659570995280ee296312
SHA512 c90fb288258aecffb140bb62935989f749feb2fa49dd0ff872ce29e2cf8406c5d1df2e40c52c608d46e22136609f1305ea56e3172ac8ee71ed7beb495e48ff56
MD5 SHA1 SHA512

SpyLogger V1.1/SpyLoger.pdb

SHA256 63fd1d9925642fee7f93fc18e7bac650bf39dca37f1656599c0379f54ea27f3f
MD5 57886f1e3d9e8c82652994edd0dab42c
SHA1 027970c3eb233eae7f799bbcccb972190ab17f32
SHA512 be7cef6c71f46533bb74b14c7b6e52f1f869e36c61cb9f871f630e21d9b6b688aabde8670e0f1bc0a63e7f4db61d54a0bf44b03c4abf6653a837495cad8a0101
SSDEEP 1536:CpiAR4IwRcJB24xUPJQj/0uIu70qrVxBCPiDF:CjihwX704VWwF
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/ASSEMBLY_EXCEPTION

SHA256 a44eb7b5caf5534c6ef536b21edb40b4d6babf91bf97d9d45596868618b2c6fb
MD5 d94f7c92ff61c5d3f8e9433f76e39f74
SHA1 7a9b074ca8d783dbe5310ecc22f5538b65cc918e
SHA512 d4044f6ceb094753075036920c0669631f4d3c13203caf2bea345e2cc4094905719732010bbe1cae97bc78743aa6def7c2aa33f3e8fca9971f2ca0457837d3b0
MD5 SHA1 SHA512

SpyLogger V1.1/res/LICENSE

SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
MD5 3e0b59f8fac05c3c03d4a26bbda13f8f
SHA1 a4fb972c240d89131ee9e16b845cd302e0ecb05f
SHA512 6732288c682a39ed9edf11a151f6f48e742696f4a762c0c7d8872b99b9f6d5ab6c305064d4910b1a254862a873129f11fd0fa56ff11bc577d29303f4fb492673
SSDEEP 384:sY2fSz/rGvS/66YsaZdIP3Lf4vAkMVhPGkupdDdicW:7vuvVmjkbylupdDdiZ
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/THIRD_PARTY_README

SHA256 c77ba9f668fee7e9b810f1493e518adf87233ac8793e4b37c9b3d1ed7846f1c0
MD5 745d6db5fc58c63f74ce6a7d4db7e695
SHA1 a816fb5dd09e32d80e1ecf47a458569e3868b975
SHA512 1e452dfd39566f1ff1d7ee9804076f1e0b8050a6d783d2a299788a099428b42544f9cb488d02061a62a3b8a5344252ea8a4ff0b5d4fdec1d99dde133da146a22
SSDEEP 3072:Yj33DuJYSqN7amC35q6dNFiG8OH8eowpQcw+4oHHZZvc9HNhJhxe+p/U0UIdKJpi:3qN2p5Jmncw+4o0HMWEyHrNRj
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/bin/JAWTAccessBridge-64.dll

IMPHASH 84a83eef8237ed147efd088b8e576a83
SHA256 ccab2f3523a55991185e2a15ecb1e07843e07370f23d0e5b5dd5ab1a26e8fbc6
MD5 921f38334c946c166ace1e48385c5155
SHA1 f2616703678f7c2b89f6b97ee35f46fa9e1702cf
SHA512 c03ab7dfbe9de86512bf82036827216d23fcd31371b82c0acf8958686ee318510253a7e13f93095c3ff0c14717dc247fd665ec6336aaff7d4904e3be524b7cdb
SSDEEP 96:BNnUdq67gng1svumPhkUcSczPcCZ3X2tybh5/BxPkbhcSFc:b+qusvKUyZ3X2tyNnpvSu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5284

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\JAWTAccessBridge-64.pdb

SpyLogger V1.1/res/bin/JavaAccessBridge-64.dll

IMPHASH feec3aaac725f71fdcd7d2601852d1fe
SHA256 ef8d8d082e0cbaa7f193e9627cc44933130071b41a0a39dad22e48be62ebe304
MD5 83a4eff632233b0ea7ac623bb866aa57
SHA1 ef9019b0d2bb9a7e49f93d91b7ef9f76603cfe64
SHA512 d334bc7c7a7fb64075fd05117256b92df024601e9e27ac2f6eb83820bb8b5bcd8822beefd1a787a5c3e32dc6ee1146750f4c352745ab6d90e83cedab814ce238
SSDEEP 3072:mh69w7BupQRXHcmWL+p6DOWXbwsKkpQHj/oNw7u1LDZvmmwY3JyuDzlcJxjj8uqz:mcMApQRXHFWM5H4qT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

66072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\JavaAccessBridge-64.pdb

Java_com_sun_java_accessibility_AccessBridge_caretUpdate Java_com_sun_java_accessibility_AccessBridge_focusGained Java_com_sun_java_accessibility_AccessBridge_focusLost Java_com_sun_java_accessibility_AccessBridge_javaShutdown Java_com_sun_java_accessibility_AccessBridge_menuCanceled Java_com_sun_java_accessibility_AccessBridge_menuDeselected Java_com_sun_java_accessibility_AccessBridge_menuSelected Java_com_sun_java_accessibility_AccessBridge_mouseClicked Java_com_sun_java_accessibility_AccessBridge_mouseEntered Java_com_sun_java_accessibility_AccessBridge_mouseExited Java_com_sun_java_accessibility_AccessBridge_mousePressed Java_com_sun_java_accessibility_AccessBridge_mouseReleased Java_com_sun_java_accessibility_AccessBridge_popupMenuCanceled Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeInvisible Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeVisible Java_com_sun_java_accessibility_AccessBridge_propertyActiveDescendentChange Java_com_sun_java_accessibility_AccessBridge_propertyCaretChange Java_com_sun_java_accessibility_AccessBridge_propertyChildChange Java_com_sun_java_accessibility_AccessBridge_propertyDescriptionChange Java_com_sun_java_accessibility_AccessBridge_propertyNameChange Java_com_sun_java_accessibility_AccessBridge_propertySelectionChange Java_com_sun_java_accessibility_AccessBridge_propertyStateChange Java_com_sun_java_accessibility_AccessBridge_propertyTableModelChange Java_com_sun_java_accessibility_AccessBridge_propertyTextChange Java_com_sun_java_accessibility_AccessBridge_propertyValueChange Java_com_sun_java_accessibility_AccessBridge_propertyVisibleDataChange Java_com_sun_java_accessibility_AccessBridge_runDLL Java_com_sun_java_accessibility_AccessBridge_sendDebugString

SpyLogger V1.1/res/bin/WindowsAccessBridge-64.dll

IMPHASH 1768570423df7104174d8d0281b2b40d
SHA256 d4f105a1bbdc42399c835523e8e748280dbf3264de385f8e91e6ebe50a1b3150
MD5 190c78f78ffbd6e2c39b932f0d0344a4
SHA1 f2b769b28c4abc8d340e33a95cb62544b6ec0b16
SHA512 7854c5ad45be504af48cba95b0ce4a08d98d213b5995ec41b383a8036a3318756f1274b6aa442758abbd4095129d3c39b2d8224c13a34e6341419f1d7f8e645b
SSDEEP 1536:5dlKqW27d3dB343JvOtqANgYGoGaTl45T3REGTyJYQBPpjVO0+xf8VZoTwZKfs:k66JvSG5aTl4J3OGmTjVV+QZ/ZJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

33000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\WindowsAccessBridge-64.pdb

kernel32

LeaveCriticalSection CloseHandle UnmapViewOfFile EnterCriticalSection MapViewOfFile GetLastError CreateFileMappingA InitializeCriticalSection FlushFileBuffers CreateFileW GetStringTypeW LCMapStringW MultiByteToWideChar WriteConsoleW SetStdHandle HeapReAlloc HeapSize LoadLibraryW HeapAlloc HeapFree GetCurrentThreadId FlsSetValue GetCommandLineA DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer TerminateProcess GetCurrentProcess GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapSetInformation GetVersion HeapCreate HeapDestroy RaiseException RtlPcToFileHeader RtlUnwindEx FlsGetValue FlsFree SetLastError FlsAlloc Sleep SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage

user32

CreateDialogParamA DestroyWindow PostMessageA SendMessageA ShowWindow IsWindow GetParent GetWindowLongA RegisterWindowMessageA SendMessageTimeoutA

Windows_run activateAccessibleHyperlink addAccessibilityEventNotification addAccessibleSelectionFromContext addJavaEventNotification clearAccessibleSelectionFromContext doAccessibleActions getAccessibleActions getAccessibleChildFromContext getAccessibleContextAt getAccessibleContextFromHWND getAccessibleContextInfo getAccessibleContextWithFocus getAccessibleHyperlink getAccessibleHyperlinkCount getAccessibleHypertext getAccessibleHypertextExt getAccessibleHypertextLinkIndex getAccessibleIcons getAccessibleKeyBindings getAccessibleParentFromContext getAccessibleRelationSet getAccessibleSelectionCountFromContext getAccessibleSelectionFromContext getAccessibleTableCellInfo getAccessibleTableColumn getAccessibleTableColumnDescription getAccessibleTableColumnHeader getAccessibleTableColumnSelectionCount getAccessibleTableColumnSelections getAccessibleTableIndex getAccessibleTableInfo getAccessibleTableRow getAccessibleTableRowDescription getAccessibleTableRowHeader getAccessibleTableRowSelectionCount getAccessibleTableRowSelections getAccessibleTextAttributes getAccessibleTextInfo getAccessibleTextItems getAccessibleTextLineBounds getAccessibleTextRange getAccessibleTextRect getAccessibleTextSelectionInfo getActiveDescendent getCaretLocation getCurrentAccessibleValueFromContext getEventsWaiting getHWNDFromAccessibleContext getMaximumAccessibleValueFromContext getMinimumAccessibleValueFromContext getObjectDepth getParentWithRole getParentWithRoleElseRoot getTextAttributesInRange getTopLevelObject getVersionInfo getVirtualAccessibleName getVisibleChildren getVisibleChildrenCount isAccessibleChildSelectedFromContext isAccessibleTableColumnSelected isAccessibleTableRowSelected isJavaWindow isSameObject releaseJavaObject removeAccessibilityEventNotification removeAccessibleSelectionFromContext removeJavaEventNotification requestFocus selectAllAccessibleSelectionFromContext selectTextRange setCaretPosition setCaretUpdateFP setFocusGainedFP setFocusLostFP setJavaShutdownFP setMenuCanceledFP setMenuDeselectedFP setMenuSelectedFP setMouseClickedFP setMouseEnteredFP setMouseExitedFP setMousePressedFP setMouseReleasedFP setPopupMenuCanceledFP setPopupMenuWillBecomeInvisibleFP setPopupMenuWillBecomeVisibleFP setPropertyActiveDescendentChangeFP setPropertyCaretChangeFP setPropertyChangeFP setPropertyChildChangeFP setPropertyDescriptionChangeFP setPropertyNameChangeFP setPropertySelectionChangeFP setPropertyStateChangeFP setPropertyTableModelChangeFP setPropertyTextChangeFP setPropertyValueChangeFP setPropertyVisibleDataChangeFP setTextContents

SpyLogger V1.1/res/bin/apksigner.jar

SHA256 eefdd6aed9db9fb849e4c98a50d8741e19d1b674ba6547220bcb9c3ed152123a
MD5 16f2d5a5d075c64d0bccb25047fa4607
SHA1 da04658eaf95bba678dcc12a004ba4e67f221469
SHA512 26430ff2feff6e3a298aeafec875167cf507ca8624f48f31505f778a5320de8fe3bd924f21f15a70fae2aa240e0a5f472e4a1de2985b9b90493c7291d759443f
SSDEEP 24576:LWqwbxpIP+ZgqcC9bXVDR23lbk2tLNT1EPQSTVesNTz55RR3gdgcVAcP:ivK+ZzX29k2d4T5Dtz55RR3gdglcP
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/bin/apksigner/certificate.pem

SHA256 a4384ba815b9499a5ce349b4e33c1755278873fe2eac150a068823f526e6dbde
MD5 4033dafc873dc7271e205b83cc9b4b17
SHA1 ef543a467d830d9975ccf0d569a7841c8b5df988
SHA512 6051af324ad8b3837086092f213904b26d63cbd9bcde46a75bce6dde69669ae418c265ebc91c1fe163ea1199959f4b594d982d4e38c201895a948f9490357ec3
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/apksigner/key.pk8

SHA256 495675d32e89a149d5abe191f4e9c0e218b9068714e9b53a7c91e164a0741a23
MD5 1823e4bcadb53e275a8ff8e1b261b7ad
SHA1 92de052cb804dea75f9815a66d7d3f6f911cdb63
SHA512 b0d46eee477ae57c4dcb417f4f5b7b51691620c51603ed9097bc0d1e39ce94a2d7ade29d1ab80819e3639fd404034dd025c13c824d9cb21ae71ae366a2ce21b1
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/apksigner/testkey.pk8

SHA256 495675d32e89a149d5abe191f4e9c0e218b9068714e9b53a7c91e164a0741a23
MD5 1823e4bcadb53e275a8ff8e1b261b7ad
SHA1 92de052cb804dea75f9815a66d7d3f6f911cdb63
SHA512 b0d46eee477ae57c4dcb417f4f5b7b51691620c51603ed9097bc0d1e39ce94a2d7ade29d1ab80819e3639fd404034dd025c13c824d9cb21ae71ae366a2ce21b1
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/apksigner/testkey.x509.pem

SHA256 8f2b9471781520c9a8284100b978d8418f9166a4b69b0cdf477e8b61a3a8b52b
MD5 5b4fc856c6d1f3d782199cbe032add22
SHA1 73415d5ca9c3a5a828d2fa7d4113803fde7775bf
SHA512 91bd0ebf0796a6eab25130a94f2e5a1cbaf0efbf2cf2d9ac515387795dc99540c67f6747e664836b22a85c2b5db0b0a5e4d09e583d7b054517da45bbbb0f5d66
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/attach.dll

IMPHASH 681bc60206cc8238ad68bbec3ca79e3d
SHA256 d99bb0047fc4754d988dbb8a46d4aabb8b3cfcf193eccac1d011580e0f4ee29f
MD5 66e2100b2932ba165230a08831abe50a
SHA1 30da5757731ac5d0b8ea244a4b9e8f9fb0853ec9
SHA512 b28eab4307d6b8593b4510b459e13d3d5febc33a3d2ef12127d51f0bb50d8bb0b6cdb1fa1d02f23a58612610e2a6648990abec49cec6494e97de3c523b524c78
SSDEEP 384:jUthDJ8PFnpr99nq5DK+E/8TuXK0TSIPCP6TdBu9t:jUFapr9Ahuk0SuG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8924

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\attach.pdb

java

JNU_ThrowInternalError JNU_ThrowIOException JNU_ThrowByName JNU_ThrowIOExceptionWithLastError JNU_GetStringPlatformChars JNU_ReleaseStringPlatformChars JNU_NewStringPlatform

advapi32

OpenThreadToken ImpersonateSelf LookupPrivilegeValueA AdjustTokenPrivileges ConvertStringSecurityDescriptorToSecurityDescriptorA

psapi

EnumProcessModules GetModuleBaseNameA EnumProcesses

msvcr100

_onexit _lock __dllonexit _unlock __clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter __C_specific_handler _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt strcpy sprintf strncpy memset strcmp malloc free

kernel32

RtlLookupFunctionEntry QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime RtlCaptureContext DisableThreadLibraryCalls GetTempPathA RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess Sleep DecodePointer EncodePointer VirtualAllocEx WriteProcessMemory CreateRemoteThread WaitForSingleObject GetExitCodeThread VirtualFreeEx CreateNamedPipeA LocalFree GetCurrentProcessId GetCurrentProcess DuplicateHandle GetCurrentThread SetLastError ReadFile ConnectNamedPipe GetLastError GetModuleHandleA GetVolumeInformationA CloseHandle OpenProcess IsWow64Process GetProcAddress

SpyLogger V1.1/res/bin/awt.dll

IMPHASH 201563478dd831e7cd7c611fd230e031
SHA256 82b97202ed41c482e5ea78ae6796c470d61e1c1ab7719650d82986b76c7cb25e
MD5 1f07e2b7561083d0c1bb3f455c21914c
SHA1 6f3014c4c0d66fde0e4931293d1493d2ad087d98
SHA512 122e85abbc83f06843d8ac8531066c177d4ce56682fabe571bfcb5d11d4abc6ca0cb696cc34e2c760e8312e45ca3dc875ee090ed58f16eb65041cee72b6fddb1
SSDEEP 24576:UhFI32FAGV76EyKDtbWQVYbcXQWPiwARWnEPw5fDyz1bs:UhFI3pGV7dDpbWQmbcXQfMf69s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

924400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\awt.pdb

kernel32

GetModuleHandleW GetVersionExW FreeLibrary Sleep GetTickCount GetProcAddress GetCurrentThreadId TlsGetValue TlsAlloc TlsSetValue MultiByteToWideChar GlobalFree lstrcpynW GlobalAlloc lstrlenW GetProfileStringW WaitForSingleObject GetLastError SetLastError GlobalUnlock GlobalLock GlobalSize GetACP GetLocaleInfoW LocalFree FormatMessageW ExpandEnvironmentStringsW lstrcpyW ReleaseMutex LocalAlloc CloseHandle GetVersion SetCurrentDirectoryW GetCurrentDirectoryW ReadFile SetFilePointer WideCharToMultiByte CreateFileW GetCurrentProcessId LCMapStringW SetEvent CreateEventW ResetEvent IsWow64Process GetCurrentProcess GetNativeSystemInfo lstrcmpW GetWindowsDirectoryW GetSystemDefaultLangID GetSystemTimeAsFileTime QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess DecodePointer EncodePointer RaiseException LoadLibraryA lstrlenA LeaveCriticalSection TryEnterCriticalSection EnterCriticalSection DeleteCriticalSection CreateMutexW InitializeCriticalSection

jvm

JVM_CurrentTimeMillis jio_snprintf JVM_RaiseSignal

java

JNU_ThrowIllegalArgumentException JNU_IsInstanceOfByName getEncodingFromLangID JNU_GetFieldByName JNU_NewObjectByName JNU_GetStaticFieldByName JNU_ThrowByName JNU_ThrowIOException JNU_NewStringPlatform JNU_ClassString JNU_CallMethodByNameV JNU_ThrowArrayIndexOutOfBoundsException JNU_ThrowInternalError JNU_SetFieldByName JDK_LoadSystemLibrary JNU_GetEnv JNU_CallStaticMethodByName JNU_CallMethodByName JNU_ThrowOutOfMemoryError JNU_ThrowNullPointerException getJavaIDFromLangID

advapi32

RegQueryValueExW RegOpenKeyExW RegQueryValueExA RegOpenKeyExA RegCloseKey

msvcr100

_wcsicmp __clean_type_info_names_internal ?_type_info_dtor_internal_method@type_info@@QEAAXXZ __crt_debugger_hook __CppXcptFilter _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt _onexit malloc free memset memcpy calloc __CxxFrameHandler3 _CxxThrowException ??3@YAXPEAX@Z wcslen _snwprintf _purecall strncmp getenv swscanf wcsncpy floorf powf ceilf _lock floor sin cos ceil sprintf strcspn strlen pow realloc qsort __iob_func printf fopen sscanf fflush vfprintf fprintf fabs strstr _control87 _strupr_s _wcsdup strcmp labs memmove _wtoi wcscmp tolower abs ??0exception@std@@QEAA@AEBQEBD@Z ?what@exception@std@@UEBAPEBDXZ ??1exception@std@@UEAA@XZ memcmp ??0exception@std@@QEAA@AEBV01@@Z swprintf_s bsearch memcpy_s sqrt wcscat wcscpy_s strchr wcschr wcsstr iswspace wcscpy strcpy setlocale wcstoul wcstok _wfullpath _vswprintf_c_l _i64tow _beginthreadex _errno strtod _wgetenv wcsncmp ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z ?_set_new_mode@@YAHH@Z _localtime64 wcsftime _ftime64 _vsnwprintf ?terminate@@YAXXZ __C_specific_handler _unlock __dllonexit

oleaut32

VariantClear SysAllocStringByteLen SysFreeString SysStringLen SysAllocString

d2d1

ord1

??0D3DContext@@AEAA@PEAUIDirect3D9@@I@Z ??0D3DContext@@QEAA@AEBV0@@Z ??0D3DPipelineManager@@AEAA@XZ ??0D3DVertexCacher@@AEAA@XZ ??1D3DContext@@UEAA@XZ ??1D3DPipelineManager@@AEAA@XZ ??1D3DVertexCacher@@QEAA@XZ ??4D3DContext@@QEAAAEAV0@AEBV0@@Z ??4D3DPipelineManager@@QEAAAEAV0@AEBV0@@Z ??4D3DVertexCacher@@QEAAAEAV0@AEBV0@@Z ??_7D3DContext@@6B@ ?BeginScene@D3DContext@@QEAAJC@Z ?BeginShapeClip@D3DContext@@QEAAJXZ ?CheckAdaptersInfo@D3DPipelineManager@@AEAAJXZ ?CheckAndResetDevice@D3DContext@@QEAAJXZ ?CheckDeviceCaps@D3DPipelineManager@@AEAAJI@Z ?CheckForBadHardware@D3DPipelineManager@@CAJKK_J@Z ?CheckOSVersion@D3DPipelineManager@@CAJXZ ?ConfigureContext@D3DContext@@QEAAJPEAU_D3DPRESENT_PARAMETERS_@@@Z ?CreateDefaultFocusWindow@D3DPipelineManager@@AEAAPEAUHWND__@@XZ ?CreateFragmentProgram@D3DContext@@AEAAPEAUIDirect3DPixelShader9@@PEAPEAKPEAUShaderList@@J@Z ?CreateInstance@D3DContext@@SAJPEAUIDirect3D9@@IPEAPEAV1@@Z ?CreateInstance@D3DPipelineManager@@CAPEAV1@XZ ?CreateInstance@D3DVertexCacher@@SAJPEAVD3DContext@@PEAPEAV1@@Z ?D3DBL_CopyImageToIntXrgbSurface@@YAJPEAUSurfaceDataRasInfo@@HPEAVD3DResource@@JJJJJJ@Z ?D3DBL_CopySurfaceToIntArgbImage@@YAJPEAUIDirect3DSurface9@@PEAUSurfaceDataRasInfo@@JJJJJJ@Z ?D3DBlitLoops_IsoBlit@@YAJPEAUJNIEnv_@@PEAVD3DContext@@_J2EJEEJJJJNNNN@Z ?D3DBlitToSurfaceViaTexture@@YAJPEAVD3DContext@@PEAUSurfaceDataRasInfo@@HPEAU_D3DSDOps@@EJJJJJNNNN@Z ?D3DEnabledOnAdapter@D3DPipelineManager@@AEAAJI@Z ?D3DRenderer_DrawAAParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z ?D3DRenderer_DrawLine@@YAJPEAVD3DContext@@JJJJ@Z ?D3DRenderer_DrawParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z ?D3DRenderer_DrawPoly@@YAJPEAVD3DContext@@JEJJPEAJ1@Z ?D3DRenderer_DrawRect@@YAJPEAVD3DContext@@JJJJ@Z ?D3DRenderer_DrawScanlines@@YAJPEAVD3DContext@@JPEAJ@Z ?D3DRenderer_FillAAParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z ?D3DRenderer_FillParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z ?D3DRenderer_FillRect@@YAJPEAVD3DContext@@JJJJ@Z ?D3DRenderer_FillSpans@@YAJPEAVD3DContext@@JPEAJ@Z ?DeleteInstance@D3DPipelineManager@@CAXXZ ?DisableAAParallelogramProgram@D3DContext@@QEAAJXZ ?DrawLine@D3DVertexCacher@@QEAAJHHHH@Z ?DrawParallelogramAA@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z ?DrawPoly@D3DVertexCacher@@QEAAJJEJJPEAJ0@Z ?DrawRect@D3DVertexCacher@@QEAAJHHHH@Z ?DrawScanlines@D3DVertexCacher@@QEAAJJPEAJ@Z ?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMM@Z ?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z ?EnableAAParallelogramProgram@D3DContext@@QEAAJXZ ?EnableBasicGradientProgram@D3DContext@@QEAAJJ@Z ?EnableConvolveProgram@D3DContext@@QEAAJJ@Z ?EnableFragmentProgram@D3DContext@@AEAAJPEAPEAKPEAUShaderList@@J@Z ?EnableLCDTextProgram@D3DContext@@QEAAJXZ ?EnableLinearGradientProgram@D3DContext@@QEAAJJ@Z ?EnableLookupProgram@D3DContext@@QEAAJJ@Z ?EnableRadialGradientProgram@D3DContext@@QEAAJJ@Z ?EnableRescaleProgram@D3DContext@@QEAAJJ@Z ?EndScene@D3DContext@@QEAAJXZ ?EndShapeClip@D3DContext@@QEAAJXZ ?EnsureCapacity@D3DVertexCacher@@AEAAJW4_D3DPRIMITIVETYPE@@I@Z ?FillParallelogram@D3DVertexCacher@@QEAAJMMMMMM@Z ?FillParallelogramAA@D3DVertexCacher@@QEAAJMMMMMM@Z ?FillRect@D3DVertexCacher@@QEAAJHHHH@Z ?FillSpans@D3DVertexCacher@@QEAAJJPEAJ@Z ?FlushVertexQueue@D3DContext@@QEAAJXZ ?GDICheckForBadHardware@D3DPipelineManager@@CAJXZ ?Get3DDevice@D3DContext@@QEAAPEAUIDirect3DDevice9@@XZ ?Get3DObject@D3DContext@@QEAAPEAUIDirect3D9@@XZ ?GetAdapterOrdinalByHmon@D3DPipelineManager@@AEAAIPEAUHMONITOR__@@@Z ?GetAdapterOrdinalForScreen@D3DPipelineManager@@QEAAIJ@Z ?GetClipType@D3DContext@@QEAA?AW4ClipType@@XZ ?GetColor@D3DVertexCacher@@QEAAJXZ ?GetContextCaps@D3DContext@@QEAAHXZ ?GetCurrentFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@XZ ?GetD3DContext@D3DPipelineManager@@QEAAJIPEAPEAVD3DContext@@@Z ?GetD3DObject@D3DPipelineManager@@QEAAPEAUIDirect3D9@@XZ ?GetDeviceCaps@D3DContext@@QEAAPEAU_D3DCAPS9@@XZ ?GetDeviceType@D3DPipelineManager@@QEAA?AW4_D3DDEVTYPE@@XZ ?GetFreeVertices@D3DVertexCacher@@QEAAIXZ ?GetGrayscaleGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ ?GetInstance@D3DPipelineManager@@SAPEAV1@XZ ?GetLCDGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ ?GetMaskCache@D3DContext@@QEAAPEAVD3DMaskCache@@XZ ?GetMatchingDepthStencilFormat@D3DPipelineManager@@QEAA?AW4_D3DFORMAT@@IW42@0@Z ?GetPaintState@D3DContext@@QEAAJXZ ?GetPresentationParams@D3DContext@@QEAAPEAU_D3DPRESENT_PARAMETERS_@@XZ ?GetResourceManager@D3DContext@@QEAAPEAVD3DResourceManager@@XZ ?HandleAdaptersChange@D3DPipelineManager@@SAJPEAPEAUHMONITOR__@@I@Z ?HandleLostDevices@D3DPipelineManager@@QEAAJXZ ?Init@D3DVertexCacher@@QEAAJPEAVD3DContext@@@Z ?InitAdapters@D3DPipelineManager@@AEAAJXZ ?InitContext@D3DContext@@QEAAJXZ ?InitContextCaps@D3DContext@@AEAAJXZ ?InitD3D@D3DPipelineManager@@AEAAJXZ ?InitDepthStencilBuffer@D3DContext@@AEAAJPEAU_D3DSURFACE_DESC@@@Z ?InitDevice@D3DContext@@AEAAJPEAUIDirect3DDevice9@@@Z ?InitGrayscaleGlyphCache@D3DContext@@QEAAJXZ ?InitLCDGlyphCache@D3DContext@@QEAAJXZ ?IsAlphaRTSurfaceSupported@D3DContext@@QEAAHXZ ?IsAlphaRTTSupported@D3DContext@@QEAAHXZ ?IsDepthStencilBufferOk@D3DContext@@AEAAHPEAU_D3DSURFACE_DESC@@@Z ?IsDynamicTextureSupported@D3DContext@@QEAAHXZ ?IsGradientInstructionExtensionSupported@D3DContext@@QEAAHXZ ?IsHWRasterizer@D3DContext@@QEAAHXZ ?IsIdentityTx@D3DContext@@QEAAHXZ ?IsImmediateIntervalSupported@D3DContext@@QEAAHXZ ?IsMultiTexturingSupported@D3DContext@@QEAAHXZ ?IsOpaqueRTTSupported@D3DContext@@QEAAHXZ ?IsPixelShader20Supported@D3DContext@@QEAAHXZ ?IsPixelShader30Supported@D3DContext@@QEAAHXZ ?IsPow2TexturesOnly@D3DContext@@QEAAHXZ ?IsSquareTexturesOnly@D3DContext@@QEAAHXZ ?IsStretchRectFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z ?IsTextureFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z ?IsTextureFormatSupported@D3DContext@@QEAAHW4_D3DFORMAT@@K@Z ?NotifyAdapterEventListeners@D3DPipelineManager@@SAXIJ@Z ?ReleaseAdapters@D3DPipelineManager@@AEAAJXZ ?ReleaseContextResources@D3DContext@@QEAAXXZ ?ReleaseD3D@D3DPipelineManager@@AEAAJXZ ?ReleaseDefPoolResources@D3DContext@@QEAAXXZ ?ReleaseDefPoolResources@D3DVertexCacher@@QEAAXXZ ?Render@D3DVertexCacher@@QEAAJH@Z ?ResetClip@D3DContext@@QEAAJXZ ?ResetComposite@D3DContext@@QEAAJXZ ?ResetContext@D3DContext@@QEAAJXZ ?ResetTransform@D3DContext@@QEAAJXZ ?RestoreState@D3DContext@@QEAAJXZ ?SaveState@D3DContext@@QEAAJXZ ?SelectDeviceType@D3DPipelineManager@@AEAA?AW4_D3DDEVTYPE@@XZ ?SetAlphaComposite@D3DContext@@QEAAJJMJ@Z ?SetColor@D3DVertexCacher@@QEAAXJ@Z ?SetFSFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@IPEAU2@@Z ?SetPaintState@D3DContext@@QEAAXJ@Z ?SetRectClip@D3DContext@@QEAAJHHHH@Z ?SetRenderTarget@D3DContext@@QEAAJPEAUIDirect3DSurface9@@@Z ?SetTexture@D3DContext@@QEAAJPEAUIDirect3DTexture9@@K@Z ?SetTransform@D3DContext@@QEAAJNNNNNN@Z ?Sync@D3DContext@@QEAAJXZ ?UpdateState@D3DContext@@QEAAJC@Z ?UpdateTextureColorState@D3DContext@@QEAAJKK@Z ?UploadTileToTexture@D3DContext@@QEAAJPEAVD3DResource@@PEAXJJJJJJJW4TileFormat@@PEAJ3@Z ?pMgr@D3DPipelineManager@@0PEAV1@EA AWTIsHeadless AccelGlyphCache_RemoveAllCellInfos DSFreeDrawingSurface DSGetComponent DSGetDrawingSurface DSLockAWT DSUnlockAWT Disposer_AddRecord GDIWinSD_InitDC GDIWindowSurfaceData_GetComp GDIWindowSurfaceData_GetOps GDIWindowSurfaceData_GetOpsNoSetup GDIWindowSurfaceData_GetWindow GetNativePrim GrPrim_CompGetAlphaInfo GrPrim_CompGetXorColor GrPrim_CompGetXorInfo GrPrim_Sg2dGetClip GrPrim_Sg2dGetCompInfo GrPrim_Sg2dGetEaRGB GrPrim_Sg2dGetLCDTextContrast GrPrim_Sg2dGetPixel J2dTraceImpl J2dTraceInit JNI_OnLoad Java_java_awt_AWTEvent_initIDs Java_java_awt_AWTEvent_nativeSetSource Java_java_awt_Button_initIDs Java_java_awt_CheckboxMenuItem_initIDs Java_java_awt_Checkbox_initIDs Java_java_awt_Choice_initIDs Java_java_awt_Color_initIDs Java_java_awt_Component_initIDs Java_java_awt_Container_initIDs Java_java_awt_Cursor_finalizeImpl Java_java_awt_Cursor_initIDs Java_java_awt_Dialog_initIDs Java_java_awt_Dimension_initIDs Java_java_awt_Event_initIDs Java_java_awt_FileDialog_initIDs Java_java_awt_FontMetrics_initIDs Java_java_awt_Font_initIDs Java_java_awt_Frame_initIDs Java_java_awt_Insets_initIDs Java_java_awt_KeyboardFocusManager_initIDs Java_java_awt_Label_initIDs Java_java_awt_MenuBar_initIDs Java_java_awt_MenuComponent_initIDs Java_java_awt_MenuItem_initIDs Java_java_awt_Menu_initIDs Java_java_awt_Rectangle_initIDs Java_java_awt_ScrollPaneAdjustable_initIDs Java_java_awt_ScrollPane_initIDs Java_java_awt_Scrollbar_initIDs Java_java_awt_TextArea_initIDs Java_java_awt_TextField_initIDs Java_java_awt_Toolkit_initIDs Java_java_awt_TrayIcon_initIDs Java_java_awt_Window_initIDs Java_java_awt_event_InputEvent_initIDs Java_java_awt_event_KeyEvent_initIDs Java_java_awt_event_MouseEvent_initIDs Java_java_awt_image_BufferedImage_initIDs Java_java_awt_image_ColorModel_initIDs Java_java_awt_image_ComponentSampleModel_initIDs Java_java_awt_image_DataBufferInt_initIDs Java_java_awt_image_IndexColorModel_initIDs Java_java_awt_image_Kernel_initIDs Java_java_awt_image_Raster_initIDs Java_java_awt_image_SampleModel_initIDs Java_java_awt_image_SinglePixelPackedSampleModel_initIDs Java_sun_awt_DebugSettings_setCTracingOn__Z Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2 Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2I Java_sun_awt_DefaultMouseInfoPeer_fillPointWithCoords Java_sun_awt_DefaultMouseInfoPeer_isWindowUnderMouse Java_sun_awt_FontDescriptor_initIDs Java_sun_awt_PlatformFont_initIDs Java_sun_awt_SunToolkit_closeSplashScreen Java_sun_awt_Win32FontManager_deRegisterFontWithPlatform Java_sun_awt_Win32FontManager_getEUDCFontFile Java_sun_awt_Win32FontManager_registerFontWithPlatform Java_sun_awt_Win32GraphicsConfig_getBounds Java_sun_awt_Win32GraphicsConfig_initIDs Java_sun_awt_Win32GraphicsDevice_configDisplayMode Java_sun_awt_Win32GraphicsDevice_enterFullScreenExclusive Java_sun_awt_Win32GraphicsDevice_enumDisplayModes Java_sun_awt_Win32GraphicsDevice_exitFullScreenExclusive Java_sun_awt_Win32GraphicsDevice_getCurrentDisplayMode Java_sun_awt_Win32GraphicsDevice_getDefaultPixIDImpl Java_sun_awt_Win32GraphicsDevice_getMaxConfigsImpl Java_sun_awt_Win32GraphicsDevice_getNativeScaleX Java_sun_awt_Win32GraphicsDevice_getNativeScaleY Java_sun_awt_Win32GraphicsDevice_initDevice Java_sun_awt_Win32GraphicsDevice_initIDs Java_sun_awt_Win32GraphicsDevice_initNativeScale Java_sun_awt_Win32GraphicsDevice_isPixFmtSupported Java_sun_awt_Win32GraphicsDevice_makeColorModel Java_sun_awt_Win32GraphicsDevice_setNativeScale Java_sun_awt_Win32GraphicsEnvironment_getDefaultScreen Java_sun_awt_Win32GraphicsEnvironment_getNumScreens Java_sun_awt_Win32GraphicsEnvironment_getXResolution Java_sun_awt_Win32GraphicsEnvironment_getYResolution Java_sun_awt_Win32GraphicsEnvironment_initDisplay Java_sun_awt_Win32GraphicsEnvironment_isVistaOS Java_sun_awt_Win32GraphicsEnvironment_setProcessDPIAwareness Java_sun_awt_image_BufImgSurfaceData_freeNativeICMData Java_sun_awt_image_BufImgSurfaceData_initIDs Java_sun_awt_image_BufImgSurfaceData_initRaster Java_sun_awt_image_ByteComponentRaster_initIDs Java_sun_awt_image_BytePackedRaster_initIDs Java_sun_awt_image_DataBufferNative_getElem Java_sun_awt_image_DataBufferNative_setElem Java_sun_awt_image_GifImageDecoder_initIDs Java_sun_awt_image_GifImageDecoder_parseImage Java_sun_awt_image_ImageRepresentation_initIDs Java_sun_awt_image_ImageRepresentation_setDiffICM Java_sun_awt_image_ImageRepresentation_setICMpixels Java_sun_awt_image_ImagingLib_convolveBI Java_sun_awt_image_ImagingLib_convolveRaster Java_sun_awt_image_ImagingLib_init Java_sun_awt_image_ImagingLib_lookupByteBI Java_sun_awt_image_ImagingLib_lookupByteRaster Java_sun_awt_image_ImagingLib_transformBI Java_sun_awt_image_ImagingLib_transformRaster Java_sun_awt_image_IntegerComponentRaster_initIDs Java_sun_awt_image_ShortComponentRaster_initIDs Java_sun_awt_shell_Win32ShellFolder2_bindToObject Java_sun_awt_shell_Win32ShellFolder2_combinePIDLs Java_sun_awt_shell_Win32ShellFolder2_compareIDs Java_sun_awt_shell_Win32ShellFolder2_compareIDsByColumn Java_sun_awt_shell_Win32ShellFolder2_copyFirstPIDLEntry Java_sun_awt_shell_Win32ShellFolder2_disposeIcon Java_sun_awt_shell_Win32ShellFolder2_doGetColumnInfo Java_sun_awt_shell_Win32ShellFolder2_doGetColumnValue Java_sun_awt_shell_Win32ShellFolder2_extractIcon Java_sun_awt_shell_Win32ShellFolder2_getAttributes0 Java_sun_awt_shell_Win32ShellFolder2_getDisplayNameOf Java_sun_awt_shell_Win32ShellFolder2_getEnumObjects Java_sun_awt_shell_Win32ShellFolder2_getExecutableType Java_sun_awt_shell_Win32ShellFolder2_getFileSystemPath0 Java_sun_awt_shell_Win32ShellFolder2_getFolderType Java_sun_awt_shell_Win32ShellFolder2_getIShellIcon Java_sun_awt_shell_Win32ShellFolder2_getIcon Java_sun_awt_shell_Win32ShellFolder2_getIconBits Java_sun_awt_shell_Win32ShellFolder2_getIconIndex Java_sun_awt_shell_Win32ShellFolder2_getIconResource Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation Java_sun_awt_shell_Win32ShellFolder2_getNextChild Java_sun_awt_shell_Win32ShellFolder2_getNextPIDLEntry Java_sun_awt_shell_Win32ShellFolder2_getStandardViewButton0 Java_sun_awt_shell_Win32ShellFolder2_getSystemIcon Java_sun_awt_shell_Win32ShellFolder2_initDesktop Java_sun_awt_shell_Win32ShellFolder2_initIDs Java_sun_awt_shell_Win32ShellFolder2_initSpecial Java_sun_awt_shell_Win32ShellFolder2_parseDisplayName0 Java_sun_awt_shell_Win32ShellFolder2_releaseEnumObjects Java_sun_awt_shell_Win32ShellFolder2_releaseIShellFolder Java_sun_awt_shell_Win32ShellFolder2_releasePIDL Java_sun_awt_shell_Win32ShellFolderManager2_initializeCom Java_sun_awt_shell_Win32ShellFolderManager2_uninitializeCom Java_sun_awt_windows_ThemeReader_closeTheme Java_sun_awt_windows_ThemeReader_getBoolean Java_sun_awt_windows_ThemeReader_getColor Java_sun_awt_windows_ThemeReader_getEnum Java_sun_awt_windows_ThemeReader_getInt Java_sun_awt_windows_ThemeReader_getPartSize Java_sun_awt_windows_ThemeReader_getPoint Java_sun_awt_windows_ThemeReader_getPosition Java_sun_awt_windows_ThemeReader_getSysBoolean Java_sun_awt_windows_ThemeReader_getThemeBackgroundContentMargins Java_sun_awt_windows_ThemeReader_getThemeMargins Java_sun_awt_windows_ThemeReader_getThemeTransitionDuration Java_sun_awt_windows_ThemeReader_isGetThemeTransitionDurationDefined Java_sun_awt_windows_ThemeReader_isThemePartDefined Java_sun_awt_windows_ThemeReader_isThemed Java_sun_awt_windows_ThemeReader_openTheme Java_sun_awt_windows_ThemeReader_paintBackground Java_sun_awt_windows_ThemeReader_setWindowTheme Java_sun_awt_windows_WButtonPeer_create Java_sun_awt_windows_WButtonPeer_initIDs Java_sun_awt_windows_WButtonPeer_setLabel Java_sun_awt_windows_WCanvasPeer_create Java_sun_awt_windows_WCanvasPeer_setNativeBackgroundErase Java_sun_awt_windows_WCheckboxMenuItemPeer_setState Java_sun_awt_windows_WCheckboxPeer_create Java_sun_awt_windows_WCheckboxPeer_getCheckMarkSize Java_sun_awt_windows_WCheckboxPeer_setCheckboxGroup Java_sun_awt_windows_WCheckboxPeer_setLabel Java_sun_awt_windows_WCheckboxPeer_setState Java_sun_awt_windows_WChoicePeer_addItems Java_sun_awt_windows_WChoicePeer_closeList Java_sun_awt_windows_WChoicePeer_create Java_sun_awt_windows_WChoicePeer_remove Java_sun_awt_windows_WChoicePeer_removeAll Java_sun_awt_windows_WChoicePeer_reshape Java_sun_awt_windows_WChoicePeer_select Java_sun_awt_windows_WClipboard_closeClipboard Java_sun_awt_windows_WClipboard_getClipboardData Java_sun_awt_windows_WClipboard_getClipboardFormats Java_sun_awt_windows_WClipboard_init Java_sun_awt_windows_WClipboard_openClipboard Java_sun_awt_windows_WClipboard_publishClipboardData Java_sun_awt_windows_WClipboard_registerClipboardViewer Java_sun_awt_windows_WColor_getDefaultColor Java_sun_awt_windows_WComponentPeer__1dispose Java_sun_awt_windows_WComponentPeer__1setBackground Java_sun_awt_windows_WComponentPeer__1setFont Java_sun_awt_windows_WComponentPeer__1setForeground Java_sun_awt_windows_WComponentPeer_addNativeDropTarget Java_sun_awt_windows_WComponentPeer_beginValidate Java_sun_awt_windows_WComponentPeer_createPrintedPixels Java_sun_awt_windows_WComponentPeer_disable Java_sun_awt_windows_WComponentPeer_enable Java_sun_awt_windows_WComponentPeer_endValidate Java_sun_awt_windows_WComponentPeer_getLocationOnScreen Java_sun_awt_windows_WComponentPeer_getTargetGC Java_sun_awt_windows_WComponentPeer_hide Java_sun_awt_windows_WComponentPeer_isObscured Java_sun_awt_windows_WComponentPeer_nativeHandleEvent Java_sun_awt_windows_WComponentPeer_nativeHandlesWheelScrolling Java_sun_awt_windows_WComponentPeer_pSetParent Java_sun_awt_windows_WComponentPeer_pShow Java_sun_awt_windows_WComponentPeer_removeNativeDropTarget Java_sun_awt_windows_WComponentPeer_reshape Java_sun_awt_windows_WComponentPeer_reshapeNoCheck Java_sun_awt_windows_WComponentPeer_setFocus Java_sun_awt_windows_WComponentPeer_setPlatformScrollingFlip Java_sun_awt_windows_WComponentPeer_setRectangularShape Java_sun_awt_windows_WComponentPeer_setZOrder Java_sun_awt_windows_WComponentPeer_start Java_sun_awt_windows_WComponentPeer_updateWindow Java_sun_awt_windows_WCustomCursor_createCursorIndirect Java_sun_awt_windows_WCustomCursor_getCursorHeight Java_sun_awt_windows_WCustomCursor_getCursorWidth Java_sun_awt_windows_WDataTransferer_dragQueryFile Java_sun_awt_windows_WDataTransferer_getClipboardFormatName Java_sun_awt_windows_WDataTransferer_imageDataToPlatformImageBytes Java_sun_awt_windows_WDataTransferer_platformImageBytesToImageData Java_sun_awt_windows_WDataTransferer_registerClipboardFormat Java_sun_awt_windows_WDefaultFontCharset_canConvert Java_sun_awt_windows_WDefaultFontCharset_initIDs Java_sun_awt_windows_WDesktopPeer_ShellExecute Java_sun_awt_windows_WDesktopProperties_getWindowsParameters Java_sun_awt_windows_WDesktopProperties_init Java_sun_awt_windows_WDesktopProperties_initIDs Java_sun_awt_windows_WDesktopProperties_playWindowsSound Java_sun_awt_windows_WDialogPeer_createAwtDialog Java_sun_awt_windows_WDialogPeer_endModal Java_sun_awt_windows_WDialogPeer_pSetIMMOption Java_sun_awt_windows_WDialogPeer_showModal Java_sun_awt_windows_WDragSourceContextPeer_createDragSource Java_sun_awt_windows_WDragSourceContextPeer_doDragDrop Java_sun_awt_windows_WDragSourceContextPeer_setNativeCursor Java_sun_awt_windows_WDropTargetContextPeerFileStream_freeStgMedium Java_sun_awt_windows_WDropTargetContextPeerIStream_Available Java_sun_awt_windows_WDropTargetContextPeerIStream_Close Java_sun_awt_windows_WDropTargetContextPeerIStream_Read Java_sun_awt_windows_WDropTargetContextPeerIStream_ReadBytes Java_sun_awt_windows_WDropTargetContextPeer_dropDone Java_sun_awt_windows_WDropTargetContextPeer_getData Java_sun_awt_windows_WEmbeddedFramePeer_create Java_sun_awt_windows_WEmbeddedFramePeer_getBoundsPrivate Java_sun_awt_windows_WEmbeddedFrame_initIDs Java_sun_awt_windows_WEmbeddedFrame_isPrinterDC Java_sun_awt_windows_WEmbeddedFrame_notifyModalBlockedImpl Java_sun_awt_windows_WEmbeddedFrame_printBand Java_sun_awt_windows_WFileDialogPeer__1dispose Java_sun_awt_windows_WFileDialogPeer__1hide Java_sun_awt_windows_WFileDialogPeer__1show Java_sun_awt_windows_WFileDialogPeer_initIDs Java_sun_awt_windows_WFileDialogPeer_setFilterString Java_sun_awt_windows_WFileDialogPeer_toBack Java_sun_awt_windows_WFileDialogPeer_toFront Java_sun_awt_windows_WFontMetrics_bytesWidth Java_sun_awt_windows_WFontMetrics_charsWidth Java_sun_awt_windows_WFontMetrics_init Java_sun_awt_windows_WFontMetrics_initIDs Java_sun_awt_windows_WFontMetrics_stringWidth Java_sun_awt_windows_WFontPeer_initIDs Java_sun_awt_windows_WFramePeer_clearMaximizedBounds Java_sun_awt_windows_WFramePeer_createAwtFrame Java_sun_awt_windows_WFramePeer_getState Java_sun_awt_windows_WFramePeer_getSysMenuHeight Java_sun_awt_windows_WFramePeer_initIDs Java_sun_awt_windows_WFramePeer_pSetIMMOption Java_sun_awt_windows_WFramePeer_setMaximizedBounds Java_sun_awt_windows_WFramePeer_setMenuBar0 Java_sun_awt_windows_WFramePeer_setState Java_sun_awt_windows_WFramePeer_synthesizeWmActivate Java_sun_awt_windows_WFramePeer_updateIcon Java_sun_awt_windows_WGlobalCursorManager_findHeavyweightUnderCursor Java_sun_awt_windows_WGlobalCursorManager_getCursorPos Java_sun_awt_windows_WGlobalCursorManager_getLocationOnScreen Java_sun_awt_windows_WGlobalCursorManager_setCursor Java_sun_awt_windows_WInputMethodDescriptor_getNativeAvailableLocales Java_sun_awt_windows_WInputMethod_createNativeContext Java_sun_awt_windows_WInputMethod_destroyNativeContext Java_sun_awt_windows_WInputMethod_disableNativeIME Java_sun_awt_windows_WInputMethod_enableNativeIME Java_sun_awt_windows_WInputMethod_endCompositionNative Java_sun_awt_windows_WInputMethod_getConversionStatus Java_sun_awt_windows_WInputMethod_getNativeIMMDescription Java_sun_awt_windows_WInputMethod_getNativeLocale Java_sun_awt_windows_WInputMethod_getOpenStatus Java_sun_awt_windows_WInputMethod_handleNativeIMEEvent Java_sun_awt_windows_WInputMethod_openCandidateWindow Java_sun_awt_windows_WInputMethod_setConversionStatus Java_sun_awt_windows_WInputMethod_setNativeLocale Java_sun_awt_windows_WInputMethod_setOpenStatus Java_sun_awt_windows_WInputMethod_setStatusWindowVisible Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusOwner Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusedWindow Java_sun_awt_windows_WKeyboardFocusManagerPeer_setNativeFocusOwner Java_sun_awt_windows_WLabelPeer_create Java_sun_awt_windows_WLabelPeer_lazyPaint Java_sun_awt_windows_WLabelPeer_setAlignment Java_sun_awt_windows_WLabelPeer_setText Java_sun_awt_windows_WListPeer_addItems Java_sun_awt_windows_WListPeer_create Java_sun_awt_windows_WListPeer_delItems Java_sun_awt_windows_WListPeer_deselect Java_sun_awt_windows_WListPeer_getMaxWidth Java_sun_awt_windows_WListPeer_isSelected Java_sun_awt_windows_WListPeer_makeVisible Java_sun_awt_windows_WListPeer_select Java_sun_awt_windows_WListPeer_setMultipleSelections Java_sun_awt_windows_WListPeer_updateMaxItemWidth Java_sun_awt_windows_WMenuBarPeer_addMenu Java_sun_awt_windows_WMenuBarPeer_create Java_sun_awt_windows_WMenuBarPeer_delMenu Java_sun_awt_windows_WMenuItemPeer__1dispose Java_sun_awt_windows_WMenuItemPeer__1setFont Java_sun_awt_windows_WMenuItemPeer__1setLabel Java_sun_awt_windows_WMenuItemPeer_create Java_sun_awt_windows_WMenuItemPeer_enable Java_sun_awt_windows_WMenuItemPeer_initIDs Java_sun_awt_windows_WMenuPeer_addSeparator Java_sun_awt_windows_WMenuPeer_createMenu Java_sun_awt_windows_WMenuPeer_createSubMenu Java_sun_awt_windows_WMenuPeer_delItem Java_sun_awt_windows_WObjectPeer_initIDs Java_sun_awt_windows_WPageDialogPeer__1show Java_sun_awt_windows_WPageDialog_initIDs Java_sun_awt_windows_WPanelPeer_initIDs Java_sun_awt_windows_WPopupMenuPeer__1show Java_sun_awt_windows_WPopupMenuPeer_createMenu Java_sun_awt_windows_WPrintDialogPeer__1show Java_sun_awt_windows_WPrintDialogPeer_initIDs Java_sun_awt_windows_WPrintDialogPeer_toBack Java_sun_awt_windows_WPrintDialogPeer_toFront Java_sun_awt_windows_WPrintDialog_initIDs Java_sun_awt_windows_WPrinterJob__1startDoc Java_sun_awt_windows_WPrinterJob_abortDoc Java_sun_awt_windows_WPrinterJob_beginPath Java_sun_awt_windows_WPrinterJob_closeFigure Java_sun_awt_windows_WPrinterJob_deleteDC Java_sun_awt_windows_WPrinterJob_deviceEndPage Java_sun_awt_windows_WPrinterJob_deviceStartPage Java_sun_awt_windows_WPrinterJob_drawDIBImage Java_sun_awt_windows_WPrinterJob_endDoc Java_sun_awt_windows_WPrinterJob_endPath Java_sun_awt_windows_WPrinterJob_fillPath Java_sun_awt_windows_WPrinterJob_fillRect Java_sun_awt_windows_WPrinterJob_frameRect Java_sun_awt_windows_WPrinterJob_getDefaultPage Java_sun_awt_windows_WPrinterJob_getGDIAdvance Java_sun_awt_windows_WPrinterJob_getNativePrintService Java_sun_awt_windows_WPrinterJob_getPenX Java_sun_awt_windows_WPrinterJob_getPenY Java_sun_awt_windows_WPrinterJob_initIDs Java_sun_awt_windows_WPrinterJob_initPrinter Java_sun_awt_windows_WPrinterJob_lineTo Java_sun_awt_windows_WPrinterJob_moveTo Java_sun_awt_windows_WPrinterJob_polyBezierTo Java_sun_awt_windows_WPrinterJob_printBand Java_sun_awt_windows_WPrinterJob_selectClipPath Java_sun_awt_windows_WPrinterJob_selectPen Java_sun_awt_windows_WPrinterJob_selectSolidBrush Java_sun_awt_windows_WPrinterJob_selectStylePen Java_sun_awt_windows_WPrinterJob_setFont Java_sun_awt_windows_WPrinterJob_setNativeCopies Java_sun_awt_windows_WPrinterJob_setNativePrintService Java_sun_awt_windows_WPrinterJob_setPolyFillMode Java_sun_awt_windows_WPrinterJob_setTextColor Java_sun_awt_windows_WPrinterJob_showDocProperties Java_sun_awt_windows_WPrinterJob_textOut Java_sun_awt_windows_WPrinterJob_validatePaper Java_sun_awt_windows_WRobotPeer__1dispose Java_sun_awt_windows_WRobotPeer_create Java_sun_awt_windows_WRobotPeer_getRGBPixels Java_sun_awt_windows_WRobotPeer_keyPress Java_sun_awt_windows_WRobotPeer_keyRelease Java_sun_awt_windows_WRobotPeer_mouseMoveImpl Java_sun_awt_windows_WRobotPeer_mousePress Java_sun_awt_windows_WRobotPeer_mouseRelease Java_sun_awt_windows_WRobotPeer_mouseWheel Java_sun_awt_windows_WScrollPanePeer__1getHScrollbarHeight Java_sun_awt_windows_WScrollPanePeer__1getVScrollbarWidth Java_sun_awt_windows_WScrollPanePeer_create Java_sun_awt_windows_WScrollPanePeer_getOffset Java_sun_awt_windows_WScrollPanePeer_initIDs Java_sun_awt_windows_WScrollPanePeer_setInsets Java_sun_awt_windows_WScrollPanePeer_setScrollPosition Java_sun_awt_windows_WScrollPanePeer_setSpans Java_sun_awt_windows_WScrollbarPeer_create Java_sun_awt_windows_WScrollbarPeer_getScrollbarSize Java_sun_awt_windows_WScrollbarPeer_setLineIncrement Java_sun_awt_windows_WScrollbarPeer_setPageIncrement Java_sun_awt_windows_WScrollbarPeer_setValues Java_sun_awt_windows_WTextAreaPeer_create Java_sun_awt_windows_WTextAreaPeer_replaceRange Java_sun_awt_windows_WTextComponentPeer_enableEditing Java_sun_awt_windows_WTextComponentPeer_getSelectionEnd Java_sun_awt_windows_WTextComponentPeer_getSelectionStart Java_sun_awt_windows_WTextComponentPeer_getText Java_sun_awt_windows_WTextComponentPeer_initIDs Java_sun_awt_windows_WTextComponentPeer_select Java_sun_awt_windows_WTextComponentPeer_setText Java_sun_awt_windows_WTextFieldPeer_create Java_sun_awt_windows_WTextFieldPeer_setEchoChar Java_sun_awt_windows_WToolkitThreadBlockedHandler_startSecondaryEventLoop Java_sun_awt_windows_WToolkit_beep Java_sun_awt_windows_WToolkit_disableCustomPalette Java_sun_awt_windows_WToolkit_embeddedDispose Java_sun_awt_windows_WToolkit_embeddedEventLoopIdleProcessing Java_sun_awt_windows_WToolkit_embeddedInit Java_sun_awt_windows_WToolkit_eventLoop Java_sun_awt_windows_WToolkit_getLockingKeyStateNative Java_sun_awt_windows_WToolkit_getMaximumCursorColors Java_sun_awt_windows_WToolkit_getNumberOfButtonsImpl Java_sun_awt_windows_WToolkit_getScreenHeight Java_sun_awt_windows_WToolkit_getScreenInsets Java_sun_awt_windows_WToolkit_getScreenWidth Java_sun_awt_windows_WToolkit_getWindowsVersion Java_sun_awt_windows_WToolkit_init Java_sun_awt_windows_WToolkit_initIDs Java_sun_awt_windows_WToolkit_isDynamicLayoutSupportedNative Java_sun_awt_windows_WToolkit_loadSystemColors Java_sun_awt_windows_WToolkit_makeColorModel Java_sun_awt_windows_WToolkit_nativeSync Java_sun_awt_windows_WToolkit_postDispose Java_sun_awt_windows_WToolkit_quitSecondaryEventLoop Java_sun_awt_windows_WToolkit_setDynamicLayoutNative Java_sun_awt_windows_WToolkit_setExtraMouseButtonsEnabledNative Java_sun_awt_windows_WToolkit_setLockingKeyStateNative Java_sun_awt_windows_WToolkit_shutdown Java_sun_awt_windows_WToolkit_startSecondaryEventLoop Java_sun_awt_windows_WToolkit_startToolkitThread Java_sun_awt_windows_WToolkit_syncNativeQueue Java_sun_awt_windows_WTrayIconPeer__1displayMessage Java_sun_awt_windows_WTrayIconPeer__1dispose Java_sun_awt_windows_WTrayIconPeer_create Java_sun_awt_windows_WTrayIconPeer_setNativeIcon Java_sun_awt_windows_WTrayIconPeer_setToolTip Java_sun_awt_windows_WTrayIconPeer_updateNativeIcon Java_sun_awt_windows_WWindowPeer__1setResizable Java_sun_awt_windows_WWindowPeer__1setTitle Java_sun_awt_windows_WWindowPeer__1toFront Java_sun_awt_windows_WWindowPeer_adjustBoundsOnDPIChange Java_sun_awt_windows_WWindowPeer_createAwtWindow Java_sun_awt_windows_WWindowPeer_getNativeWindowSize Java_sun_awt_windows_WWindowPeer_getScreenImOn Java_sun_awt_windows_WWindowPeer_getSysIconHeight Java_sun_awt_windows_WWindowPeer_getSysIconWidth Java_sun_awt_windows_WWindowPeer_getSysMinHeight Java_sun_awt_windows_WWindowPeer_getSysMinWidth Java_sun_awt_windows_WWindowPeer_getSysSmIconHeight Java_sun_awt_windows_WWindowPeer_getSysSmIconWidth Java_sun_awt_windows_WWindowPeer_initIDs Java_sun_awt_windows_WWindowPeer_modalDisable Java_sun_awt_windows_WWindowPeer_modalEnable Java_sun_awt_windows_WWindowPeer_nativeGrab Java_sun_awt_windows_WWindowPeer_nativeUngrab Java_sun_awt_windows_WWindowPeer_repositionSecurityWarning Java_sun_awt_windows_WWindowPeer_requestWindowFocus Java_sun_awt_windows_WWindowPeer_reshapeFrame Java_sun_awt_windows_WWindowPeer_setAlwaysOnTopNative Java_sun_awt_windows_WWindowPeer_setFocusableWindow Java_sun_awt_windows_WWindowPeer_setFullScreenExclusiveModeState Java_sun_awt_windows_WWindowPeer_setIconImagesData Java_sun_awt_windows_WWindowPeer_setMinSize Java_sun_awt_windows_WWindowPeer_setOpacity Java_sun_awt_windows_WWindowPeer_setOpaqueImpl Java_sun_awt_windows_WWindowPeer_toBack Java_sun_awt_windows_WWindowPeer_updateInsets Java_sun_awt_windows_WWindowPeer_updateWindowImpl Java_sun_java2d_DefaultDisposerRecord_invokeNativeDispose Java_sun_java2d_Disposer_initIDs Java_sun_java2d_SurfaceData_initIDs Java_sun_java2d_SurfaceData_isOpaqueGray Java_sun_java2d_d3d_D3DGraphicsDevice_configDisplayModeNative Java_sun_java2d_d3d_D3DGraphicsDevice_enterFullScreenExclusiveNative Java_sun_java2d_d3d_D3DGraphicsDevice_enumDisplayModesNative Java_sun_java2d_d3d_D3DGraphicsDevice_exitFullScreenExclusiveNative Java_sun_java2d_d3d_D3DGraphicsDevice_getAvailableAcceleratedMemoryNative Java_sun_java2d_d3d_D3DGraphicsDevice_getCurrentDisplayModeNative Java_sun_java2d_d3d_D3DGraphicsDevice_getDeviceCapsNative Java_sun_java2d_d3d_D3DGraphicsDevice_getDeviceIdNative Java_sun_java2d_d3d_D3DGraphicsDevice_initD3D Java_sun_java2d_d3d_D3DGraphicsDevice_isD3DAvailableOnDeviceNative Java_sun_java2d_d3d_D3DMaskFill_maskFill Java_sun_java2d_d3d_D3DRenderQueue_flushBuffer Java_sun_java2d_d3d_D3DRenderer_drawPoly Java_sun_java2d_d3d_D3DSurfaceData_dbGetPixelNative Java_sun_java2d_d3d_D3DSurfaceData_dbSetPixelNative Java_sun_java2d_d3d_D3DSurfaceData_getNativeResourceNative Java_sun_java2d_d3d_D3DSurfaceData_initFlipBackbuffer Java_sun_java2d_d3d_D3DSurfaceData_initOps Java_sun_java2d_d3d_D3DSurfaceData_initRTSurface Java_sun_java2d_d3d_D3DSurfaceData_initTexture Java_sun_java2d_d3d_D3DSurfaceData_updateWindowAccelImpl Java_sun_java2d_d3d_D3DTextRenderer_drawGlyphList Java_sun_java2d_loops_BlitBg_BlitBg Java_sun_java2d_loops_Blit_Blit Java_sun_java2d_loops_DrawLine_DrawLine Java_sun_java2d_loops_DrawParallelogram_DrawParallelogram Java_sun_java2d_loops_DrawPath_DrawPath Java_sun_java2d_loops_DrawPolygons_DrawPolygons Java_sun_java2d_loops_DrawRect_DrawRect Java_sun_java2d_loops_FillParallelogram_FillParallelogram Java_sun_java2d_loops_FillPath_FillPath Java_sun_java2d_loops_FillRect_FillRect Java_sun_java2d_loops_FillSpans_FillSpans Java_sun_java2d_loops_GraphicsPrimitiveMgr_initIDs Java_sun_java2d_loops_GraphicsPrimitiveMgr_registerNativeLoops Java_sun_java2d_loops_GraphicsPrimitiveMgr_setTraceFlags Java_sun_java2d_loops_MaskBlit_MaskBlit Java_sun_java2d_loops_MaskFill_DrawAAPgram Java_sun_java2d_loops_MaskFill_FillAAPgram Java_sun_java2d_loops_MaskFill_MaskFill Java_sun_java2d_loops_ScaledBlit_Scale Java_sun_java2d_loops_TransformHelper_Transform Java_sun_java2d_opengl_OGLContext_getOGLIdString Java_sun_java2d_opengl_OGLMaskFill_maskFill Java_sun_java2d_opengl_OGLRenderQueue_flushBuffer Java_sun_java2d_opengl_OGLRenderer_drawPoly Java_sun_java2d_opengl_OGLSurfaceData_getTextureID Java_sun_java2d_opengl_OGLSurfaceData_getTextureTarget Java_sun_java2d_opengl_OGLSurfaceData_initFBObject Java_sun_java2d_opengl_OGLSurfaceData_initFlipBackbuffer Java_sun_java2d_opengl_OGLSurfaceData_initTexture Java_sun_java2d_opengl_OGLTextRenderer_drawGlyphList Java_sun_java2d_opengl_WGLGraphicsConfig_getDefaultPixFmt Java_sun_java2d_opengl_WGLGraphicsConfig_getOGLCapabilities Java_sun_java2d_opengl_WGLGraphicsConfig_getWGLConfigInfo Java_sun_java2d_opengl_WGLGraphicsConfig_initWGL Java_sun_java2d_opengl_WGLSurfaceData_initOps Java_sun_java2d_opengl_WGLSurfaceData_initPbuffer Java_sun_java2d_opengl_WGLSurfaceData_updateWindowAccelImpl Java_sun_java2d_pipe_BufferedMaskBlit_enqueueTile Java_sun_java2d_pipe_BufferedRenderPipe_fillSpans Java_sun_java2d_pipe_Region_initIDs Java_sun_java2d_pipe_ShapeSpanIterator_addSegment Java_sun_java2d_pipe_ShapeSpanIterator_appendPoly Java_sun_java2d_pipe_ShapeSpanIterator_closePath Java_sun_java2d_pipe_ShapeSpanIterator_curveTo Java_sun_java2d_pipe_ShapeSpanIterator_dispose Java_sun_java2d_pipe_ShapeSpanIterator_getNativeConsumer Java_sun_java2d_pipe_ShapeSpanIterator_getNativeIterator Java_sun_java2d_pipe_ShapeSpanIterator_getPathBox Java_sun_java2d_pipe_ShapeSpanIterator_initIDs Java_sun_java2d_pipe_ShapeSpanIterator_intersectClipBox Java_sun_java2d_pipe_ShapeSpanIterator_lineTo Java_sun_java2d_pipe_ShapeSpanIterator_moveTo Java_sun_java2d_pipe_ShapeSpanIterator_nextSpan Java_sun_java2d_pipe_ShapeSpanIterator_pathDone Java_sun_java2d_pipe_ShapeSpanIterator_quadTo Java_sun_java2d_pipe_ShapeSpanIterator_setNormalize Java_sun_java2d_pipe_ShapeSpanIterator_setOutputAreaXYXY Java_sun_java2d_pipe_ShapeSpanIterator_setRule Java_sun_java2d_pipe_ShapeSpanIterator_skipDownTo Java_sun_java2d_pipe_SpanClipRenderer_eraseTile Java_sun_java2d_pipe_SpanClipRenderer_fillTile Java_sun_java2d_pipe_SpanClipRenderer_initIDs Java_sun_java2d_windows_GDIBlitLoops_nativeBlit Java_sun_java2d_windows_GDIRenderer_devCopyArea Java_sun_java2d_windows_GDIRenderer_doDrawArc Java_sun_java2d_windows_GDIRenderer_doDrawLine Java_sun_java2d_windows_GDIRenderer_doDrawOval Java_sun_java2d_windows_GDIRenderer_doDrawPoly Java_sun_java2d_windows_GDIRenderer_doDrawRect Java_sun_java2d_windows_GDIRenderer_doDrawRoundRect Java_sun_java2d_windows_GDIRenderer_doFillArc Java_sun_java2d_windows_GDIRenderer_doFillOval Java_sun_java2d_windows_GDIRenderer_doFillPoly Java_sun_java2d_windows_GDIRenderer_doFillRect Java_sun_java2d_windows_GDIRenderer_doFillRoundRect Java_sun_java2d_windows_GDIRenderer_doShape Java_sun_java2d_windows_GDIWindowSurfaceData_initIDs Java_sun_java2d_windows_GDIWindowSurfaceData_initOps Java_sun_java2d_windows_GDIWindowSurfaceData_invalidateSD Java_sun_java2d_windows_WindowsFlags_initNativeFlags Java_sun_print_Win32PrintJob_endPrintRawData Java_sun_print_Win32PrintJob_printRawData Java_sun_print_Win32PrintJob_startPrintRawData Java_sun_print_Win32PrintServiceLookup_getAllPrinterNames Java_sun_print_Win32PrintServiceLookup_getDefaultPrinterName Java_sun_print_Win32PrintServiceLookup_notifyClosePrinterChange Java_sun_print_Win32PrintServiceLookup_notifyFirstPrinterChange Java_sun_print_Win32PrintServiceLookup_notifyPrinterChange Java_sun_print_Win32PrintService_getAllMediaIDs Java_sun_print_Win32PrintService_getAllMediaNames Java_sun_print_Win32PrintService_getAllMediaSizes Java_sun_print_Win32PrintService_getAllMediaTrayNames Java_sun_print_Win32PrintService_getAllMediaTrays Java_sun_print_Win32PrintService_getAllResolutions Java_sun_print_Win32PrintService_getCapabilities Java_sun_print_Win32PrintService_getCopiesSupported Java_sun_print_Win32PrintService_getDefaultSettings Java_sun_print_Win32PrintService_getJobStatus Java_sun_print_Win32PrintService_getMediaPrintableArea Java_sun_print_Win32PrintService_getPrinterPort RegionToYXBandedRectangles Region_CountIterationRects Region_EndIteration Region_GetBounds Region_GetInfo Region_NextIteration Region_StartIteration SurfaceData_GetOps SurfaceData_GetOpsNoSetup SurfaceData_InitOps SurfaceData_IntersectBlitBounds SurfaceData_IntersectBounds SurfaceData_IntersectBoundsXYWH SurfaceData_IntersectBoundsXYXY SurfaceData_SetOps SurfaceData_ThrowInvalidPipeException Transform_GetInfo Transform_transform awt_getImagingLib awt_setMlibStartTimer awt_setMlibStopTimer preloadD3D preloadStop

SpyLogger V1.1/res/bin/certificate.pem

SHA256 49079549996b8cc4b6280ac1a2488701097779a30e82c1ddaacb6d8cf2ea0018
MD5 7ec1406c3ce64617f28e3de20fbba150
SHA1 dc415115542e9e367ae799b7baa270a494cd26f5
SHA512 1b87bfb743916eac0a9076bd68295e25b913be67806609a032cff9bc3e172e1da74e1da283d493042750eea7a7693c227f97c2cf27f74977d795185f056affcf
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/dt_shmem.dll

IMPHASH 44359a9d113516a0a885474c53087284
SHA256 ed9700348012f9511ea1b82a916eeda4ed9e5f4ec9fd24bf5946c28d0612a68c
MD5 3bcd7abd1ac3a71f666eea615f6a371a
SHA1 7434c2538b71f30b44cd6f98090e975bff6357a8
SHA512 2e8077fb87586ba45b111b92fd0e5742024f606c7bcee59c78cb0bb3890bbdf998a9f0adef2700c61fb6849f4ab3c8e75ee0c8925a1bc113b4b7f59a8fbde999
SSDEEP 384:PaYm6wS/oZsegB/zS1LogRAN0KF/0kFY2SWv8N3Nf5ua6/j:PfmDj1i/zS1Ha0KFMkLSsOZcj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

15752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\dt_shmem.pdb

SpyLogger V1.1/res/bin/dt_socket.dll

IMPHASH 692885e3800789ff520376cb62a55e4b
SHA256 799300dadbe9fab08af08c113fa262944b11e6c035a57910f7f28d45d2f84280
MD5 3834ec00bb87c7e64200fbf1020b3837
SHA1 74aead35aabcec0bcc28f37ef7e6243042f9122b
SHA512 81e5d8e065a5cbc85994dea4a35a008dd0e68e02dce357bad0fdca74319368fe740aa2683a39496ced3180189a2d2e25b8180379cb95945f2e44898a839fdf43
SSDEEP 192:oRbiEPlT0ThwZ0tr0YlhcnTYxNW1r3pY31UeEGeQvQ+Wr/6SJwIwZJ5lGM03XWh/:mtlT0TmZU06hKYxU1relqdLwZJfe74
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

10628

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\dt_socket.pdb

SpyLogger V1.1/res/bin/fontmanager.dll

IMPHASH a1c6ed90647887b7fc41e7593f4580b9
SHA256 90d47c6f47c30beeb27a53283ca14313a6f12aa07afa339b853a23ce1c08a009
MD5 9e48e8cc2ecf9796855dc9ea4b431b39
SHA1 f30a43cedf4dc82509996a0cd166ef12c4a06725
SHA512 9dc5b3ab1cbd7bfd8d89e560b1374a41b70ee47c96fcdd3b1e04ac785085b2db64ce286c3a91385f18602b73aca275b8e56034da82e2eb0c8c1e43ca9cea784f
SSDEEP 12288:ITCiggdLQwB/MV1EvbYGSOLWHtcZ5d7Tr1:I3dlQwB/MV1EDYBHtO7Tr1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

331160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\fontmanager.pdb

freetype

FT_Done_FreeType FT_Library_SetLcdFilter FT_Done_Face FT_Open_Face FT_New_Memory_Face FT_Outline_Get_BBox FT_Outline_Translate FT_Get_Char_Index FT_Load_Glyph FT_GlyphSlot_Embolden FT_GlyphSlot_Oblique FT_Render_Glyph FT_Set_Transform FT_Set_Char_Size FT_Activate_Size FT_Init_FreeType

java

JNU_ThrowArrayIndexOutOfBoundsException JNU_NewStringPlatform JDK_LoadSystemLibrary JNU_ThrowInternalError

advapi32

RegOpenKeyExA RegQueryInfoKeyW RegQueryInfoKeyA RegEnumValueW RegEnumValueA RegCloseKey

user32

ReleaseDC SystemParametersInfoA FillRect GetWindowDC GetDesktopWindow GetDC

gdi32

GetObjectA CreateCompatibleDC SetMapMode CreateFontIndirectW SelectObject CreateCompatibleBitmap GetTextMetricsA DeleteObject GetGlyphOutlineA GetStockObject SetBkColor SetTextColor ExtTextOutW GetDIBits EnumFontFamiliesExA EnumFontFamiliesExW GetDeviceCaps GetCurrentObject

awt

GrPrim_Sg2dGetCompInfo GrPrim_Sg2dGetClip SurfaceData_GetOps SurfaceData_InitOps SurfaceData_IntersectBounds GrPrim_Sg2dGetEaRGB GrPrim_Sg2dGetPixel GetNativePrim GrPrim_Sg2dGetLCDTextContrast AccelGlyphCache_RemoveAllCellInfos SurfaceData_GetOpsNoSetup

msvcr100

_wcsicmp pow _stricmp _onexit _lock __dllonexit _unlock __clean_type_info_names_internal __crt_debugger_hook ?_type_info_dtor_internal_method@type_info@@QEAAXXZ ?terminate@@YAXXZ __CppXcptFilter __C_specific_handler free malloc ??3@YAXPEAX@Z ??2@YAPEAX_K@Z floor _strdup memset _purecall getenv calloc memcpy realloc strrchr strstr wcsstr wcsrchr sqrt fprintf __iob_func strtol _errno strncpy memmove strncmp qsort bsearch strchr _vsnprintf _malloc_crt _initterm _initterm_e _encoded_null _amsg_exit

kernel32

GetSystemTimeAsFileTime GetWindowsDirectoryA GetCurrentProcessId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetVersionExA GetSystemDirectoryA GetCurrentThreadId GetProcAddress EncodePointer DecodePointer Sleep TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DisableThreadLibraryCalls QueryPerformanceCounter GetVersion GetTickCount

JNI_OnUnload Java_sun_awt_Win32FontManager_getFontPath Java_sun_awt_Win32FontManager_populateFontFileNameMap0 Java_sun_font_ColorGlyphSurfaceData_initOps Java_sun_font_ColorGlyphSurfaceData_setCurrentGlyph Java_sun_font_FileFontStrike__1getGlyphImageFromWindows Java_sun_font_FileFontStrike__1getGlyphImageFromWindowsUsingDirectWrite Java_sun_font_FileFontStrike_initNative Java_sun_font_FileFontStrike_isDirectWriteAvailable Java_sun_font_Font2D_createHarfbuzzFace Java_sun_font_Font2D_disposeHarfbuzzFace Java_sun_font_FreetypeFontScaler_createScalerContextNative Java_sun_font_FreetypeFontScaler_disposeNativeScaler Java_sun_font_FreetypeFontScaler_getFontMetricsNative Java_sun_font_FreetypeFontScaler_getGlyphAdvanceNative Java_sun_font_FreetypeFontScaler_getGlyphCodeNative Java_sun_font_FreetypeFontScaler_getGlyphImageNative Java_sun_font_FreetypeFontScaler_getGlyphMetricsNative Java_sun_font_FreetypeFontScaler_getGlyphOutlineBoundsNative Java_sun_font_FreetypeFontScaler_getGlyphOutlineNative Java_sun_font_FreetypeFontScaler_getGlyphPointNative Java_sun_font_FreetypeFontScaler_getGlyphVectorOutlineNative Java_sun_font_FreetypeFontScaler_getLayoutTableCacheNative Java_sun_font_FreetypeFontScaler_getMissingGlyphCodeNative Java_sun_font_FreetypeFontScaler_getNumGlyphsNative Java_sun_font_FreetypeFontScaler_getUnitsPerEMNative Java_sun_font_FreetypeFontScaler_initIDs Java_sun_font_FreetypeFontScaler_initNativeScaler Java_sun_font_NullFontScaler_getGlyphImage Java_sun_font_NullFontScaler_getNullScalerContext Java_sun_font_StrikeCache_freeIntMemory Java_sun_font_StrikeCache_freeIntPointer Java_sun_font_StrikeCache_freeLongMemory Java_sun_font_StrikeCache_freeLongPointer Java_sun_font_StrikeCache_getGlyphCacheDescription Java_sun_font_SunFontManager_initIDs Java_sun_font_SunLayoutEngine_initGVIDs Java_sun_font_SunLayoutEngine_nativeLayout Java_sun_font_SunLayoutEngine_shape Java_sun_font_TrueTypeFont_getSupportedCharsetsForFamily Java_sun_java2d_loops_DrawGlyphListAA_DrawGlyphListAA Java_sun_java2d_loops_DrawGlyphListLCD_DrawGlyphListLCD Java_sun_java2d_loops_DrawGlyphList_DrawGlyphList freeLayoutTableCache getSunFontIDs isNullScalerContext newLayoutTableCache

SpyLogger V1.1/res/bin/freetype.dll

IMPHASH 31b34a583303b3d63bc2d766c052741f
SHA256 c8462d58085b6fee90a5babdd6e79f9ac539f889dd9cd9eccb20b3881105a87a
MD5 9a5dbf619f385df87e6016885a97bce9
SHA1 fed2149368abc42fd34e592e05f553b534c22eb4
SHA512 3751f3e98f6489b884d308bc8a0398666a243240d150dd9c45023852f7e2b7cd3fcc12cf955b835caaa75abb3e211dd116621f6935854b8655877beb62c5d81c
SSDEEP 12288:fN43hmD7Bs5OqUE9S0B9PBv9xgE3+/UnYwpeYufEWmiQ:143hmD7BsNUEvPG/xw7ZiQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

394708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FTC_CMapCache_Lookup FTC_CMapCache_New FTC_ImageCache_Lookup FTC_ImageCache_LookupScaler FTC_ImageCache_New FTC_Manager_Done FTC_Manager_LookupFace FTC_Manager_LookupSize FTC_Manager_New FTC_Manager_RemoveFaceID FTC_Manager_Reset FTC_Node_Unref FTC_SBitCache_Lookup FTC_SBitCache_LookupScaler FTC_SBitCache_New FT_Activate_Size FT_Add_Default_Modules FT_Add_Module FT_Angle_Diff FT_Atan2 FT_Attach_File FT_Attach_Stream FT_Bitmap_Convert FT_Bitmap_Copy FT_Bitmap_Done FT_Bitmap_Embolden FT_Bitmap_New FT_CeilFix FT_ClassicKern_Free FT_ClassicKern_Validate FT_Cos FT_DivFix FT_Done_Face FT_Done_FreeType FT_Done_Glyph FT_Done_Library FT_Done_Size FT_Face_CheckTrueTypePatents FT_Face_GetCharVariantIndex FT_Face_GetCharVariantIsDefault FT_Face_GetCharsOfVariant FT_Face_GetVariantSelectors FT_Face_GetVariantsOfChar FT_Face_SetUnpatentedHinting FT_FloorFix FT_Get_Advance FT_Get_Advances FT_Get_CMap_Format FT_Get_CMap_Language_ID FT_Get_Char_Index FT_Get_Charmap_Index FT_Get_FSType_Flags FT_Get_First_Char FT_Get_Gasp FT_Get_Glyph FT_Get_Glyph_Name FT_Get_Kerning FT_Get_MM_Var FT_Get_Module FT_Get_Multi_Master FT_Get_Name_Index FT_Get_Next_Char FT_Get_PFR_Advance FT_Get_PFR_Kerning FT_Get_PFR_Metrics FT_Get_PS_Font_Info FT_Get_PS_Font_Private FT_Get_PS_Font_Value FT_Get_Postscript_Name FT_Get_Renderer FT_Get_Sfnt_Name FT_Get_Sfnt_Name_Count FT_Get_Sfnt_Table FT_Get_SubGlyph_Info FT_Get_Track_Kerning FT_Get_TrueType_Engine_Type FT_Get_WinFNT_Header FT_Get_X11_Font_Format FT_GlyphSlot_Embolden FT_GlyphSlot_Oblique FT_GlyphSlot_Own_Bitmap FT_Glyph_Copy FT_Glyph_Get_CBox FT_Glyph_Stroke FT_Glyph_StrokeBorder FT_Glyph_To_Bitmap FT_Glyph_Transform FT_Gzip_Uncompress FT_Has_PS_Glyph_Names FT_Init_FreeType FT_Library_SetLcdFilter FT_Library_SetLcdFilterWeights FT_Library_Version FT_List_Add FT_List_Finalize FT_List_Find FT_List_Insert FT_List_Iterate FT_List_Remove FT_List_Up FT_Load_Char FT_Load_Glyph FT_Load_Sfnt_Table FT_Matrix_Invert FT_Matrix_Multiply FT_MulDiv FT_MulFix FT_New_Face FT_New_Library FT_New_Memory_Face FT_New_Size FT_OpenType_Free FT_OpenType_Validate FT_Open_Face FT_Outline_Check FT_Outline_Copy FT_Outline_Decompose FT_Outline_Done FT_Outline_Done_Internal FT_Outline_Embolden FT_Outline_EmboldenXY FT_Outline_GetInsideBorder FT_Outline_GetOutsideBorder FT_Outline_Get_BBox FT_Outline_Get_Bitmap FT_Outline_Get_CBox FT_Outline_Get_Orientation FT_Outline_New FT_Outline_New_Internal FT_Outline_Render FT_Outline_Reverse FT_Outline_Transform FT_Outline_Translate FT_Property_Get FT_Property_Set FT_Reference_Face FT_Reference_Library FT_Remove_Module FT_Render_Glyph FT_Request_Size FT_RoundFix FT_Select_Charmap FT_Select_Size FT_Set_Char_Size FT_Set_Charmap FT_Set_Debug_Hook FT_Set_MM_Blend_Coordinates FT_Set_MM_Design_Coordinates FT_Set_Pixel_Sizes FT_Set_Renderer FT_Set_Transform FT_Set_Var_Blend_Coordinates FT_Set_Var_Design_Coordinates FT_Sfnt_Table_Info FT_Sin FT_Stream_OpenGzip FT_Stream_OpenLZW FT_Stroker_BeginSubPath FT_Stroker_ConicTo FT_Stroker_CubicTo FT_Stroker_Done FT_Stroker_EndSubPath FT_Stroker_Export FT_Stroker_ExportBorder FT_Stroker_GetBorderCounts FT_Stroker_GetCounts FT_Stroker_LineTo FT_Stroker_New FT_Stroker_ParseOutline FT_Stroker_Rewind FT_Stroker_Set FT_Tan FT_TrueTypeGX_Free FT_TrueTypeGX_Validate FT_Vector_From_Polar FT_Vector_Length FT_Vector_Polarize FT_Vector_Rotate FT_Vector_Transform FT_Vector_Unit TT_New_Context TT_RunIns

SpyLogger V1.1/res/bin/hprof.dll

IMPHASH b58e6b5d7f0c8de9dad624efe0d84bed
SHA256 811ce4c7ad141a3dc0078407bd2969e946c3859b3f3c3f4904133f2b66420955
MD5 30f1a39d9a74cbb366514ce4a2391db1
SHA1 1123e1241b65726c6fd6b96843705cb3eedd7771
SHA512 21f72e2231495ee75d69078f2723f40c468dc46b4db84e10cb0326fd6aa310a24cf804dbb188e22cc6cea8aab36ec72fabea78a23138ecf67f4003c1000c8aa0
SSDEEP 3072:h6bSTjx/1RWaJ5cb5CqJ4umThfAJ48shTJ97zns8OlB/hcY1vRTi:h6bSTlNEYKbEqAThYFshnn4hnv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

114740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\hprof.pdb

wsock32

ntohl ntohs htonl WSAStartup WSACleanup send shutdown recv gethostbyname htons socket connect closesocket

winmm

timeGetTime

msvcr100

exit strrchr remove tolower strchr fprintf strtod strtol getenv free _ctime64 signal _lseeki64 _vsnprintf strerror _access _snprintf strtok_s sprintf qsort _write _malloc_crt _initterm _initterm_e _encoded_null _amsg_exit __C_specific_handler __CppXcptFilter __crt_debugger_hook __clean_type_info_names_internal _unlock __dllonexit _lock _onexit abort __iob_func vfprintf strncpy memset isprint memcpy _errno _strdup _getpid _open _read _time64 malloc

kernel32

UnhandledExceptionFilter TerminateProcess DecodePointer EncodePointer GetModuleFileNameA GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter FreeLibrary GetLastError FormatMessageA SystemTimeToFileTime GetSystemTime Sleep LoadLibraryA GetProcAddress GetCurrentProcess

SpyLogger V1.1/res/bin/instrument.dll

IMPHASH 4bad2ab3b225cd788464fd724f482eed
SHA256 c52150fe89cff64775449e17963191d27b62ae5e69fda56407925fb6ef4e920d
MD5 630de9ec3ce57852cae7d81802940ba7
SHA1 a6106b6267e0f0b003b073ae6e6d8cec6d52cb7c
SHA512 1f116160c0e10653dda2a90b87f60d8f18b9c92c1ae4a58f97ed5bd2ea3fcfe616b99c0bb1cb61d6d6418ee0ba3290b025154955b0884ca6ef9ed02e1753372f
SSDEEP 1536:hFIfuaRZx2l972EGYP+98yn8sanwonTXxDQ1p96BkRceqdQIOVnToIfQVpa0vj7W:DIhc7PGYyWbnznTBOsuAG9TBfQVNjy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

42820

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\instrument.pdb

kernel32

WideCharToMultiByte MultiByteToWideChar GetACP GetLocaleInfoA GetUserDefaultLCID IsDBCSLeadByte GetLastError FindClose FindFirstFileA HeapFree HeapAlloc HeapReAlloc EnterCriticalSection LeaveCriticalSection GetFullPathNameA GetCurrentThreadId FlsSetValue GetCommandLineA SetFilePointer HeapSetInformation GetVersion HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW EncodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection Sleep GetCPInfo GetOEMCP IsValidCodePage FlsGetValue FlsFree SetLastError FlsAlloc LCMapStringW GetDriveTypeW GetStringTypeW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle LoadLibraryW GetConsoleCP GetConsoleMode FlushFileBuffers GetCurrentDirectoryW HeapSize CloseHandle WriteConsoleW CreateFileW ReadFile CreateFileA SetEndOfFile GetProcessHeap

SpyLogger V1.1/res/bin/j2pcsc.dll

IMPHASH 393aaef8896c4197547fbb124ec12024
SHA256 09ddc4c3a84949f7c03729036f543abec32a587b811f39ef753e5f473f1cfaea
MD5 615136158a0c5f8e16214ad67db7a9fd
SHA1 62a7f439b20b4c55954016ba1052bc3c98199279
SHA512 deb122c2e696ce7fae6c8d29f03aae96dc32773998b3a1868ba1c390bf06243194811a0ce656b21a74f266ab10e1c96444fba5c98e95c87575aef1ef86a6ac3b
SSDEEP 192:aNvbtTgjlGYZsGpTS4D2v1Xhnx7pIF/UHGCSeszNu3X2Mw6LffjU:aNvJalGYd9zE1Rnx7pIFLC8Nyk6LffA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\j2pcsc.pdb

SpyLogger V1.1/res/bin/j2pkcs11.dll

IMPHASH 582a8fa0fcebe54edd089612f66abef1
SHA256 a0dbf549421bd73dfc36e99d460bec4e704c795008b05df4e999efe9443f7f7b
MD5 5d97beaf24257ca775830b8b374e748f
SHA1 4e3da621ccd2cd8c5416d02a5346eecb79310821
SHA512 d01aa25d665d336be18b45fc4c6200e64dc44c0121cc28a83fe1eaf25574d106bd43b846c668d982e6657caaccd3d52c095a3dd0e4ef1e3d03209ab8ed20da25
SSDEEP 1536:fix72jH5j2QG+bK8TKJjy8RbZT9SxnDy4/r0b19r7xn1bTPUAhU9hOBAnWgFgUfE:5zTG+bK8TK9yGskdm+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

42280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\j2pkcs11.pdb

JNI_OnLoad Java_sun_security_pkcs11_Secmod_nssGetLibraryHandle Java_sun_security_pkcs11_Secmod_nssGetModuleList Java_sun_security_pkcs11_Secmod_nssInitialize Java_sun_security_pkcs11_Secmod_nssLoadLibrary Java_sun_security_pkcs11_Secmod_nssVersionCheck Java_sun_security_pkcs11_wrapper_PKCS11_C_1CloseSession Java_sun_security_pkcs11_wrapper_PKCS11_C_1CopyObject Java_sun_security_pkcs11_wrapper_PKCS11_C_1CreateObject Java_sun_security_pkcs11_wrapper_PKCS11_C_1Decrypt Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptUpdate Java_sun_security_pkcs11_wrapper_PKCS11_C_1DeriveKey Java_sun_security_pkcs11_wrapper_PKCS11_C_1DestroyObject Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestKey Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestSingle Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestUpdate Java_sun_security_pkcs11_wrapper_PKCS11_C_1Encrypt Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptUpdate Java_sun_security_pkcs11_wrapper_PKCS11_C_1Finalize Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjects Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjectsFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjectsInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateKey Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateKeyPair Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateRandom Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetAttributeValue Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetInfo Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetMechanismInfo Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetMechanismList Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetOperationState Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSessionInfo Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSlotInfo Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSlotList Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetTokenInfo Java_sun_security_pkcs11_wrapper_PKCS11_C_1Initialize Java_sun_security_pkcs11_wrapper_PKCS11_C_1Login Java_sun_security_pkcs11_wrapper_PKCS11_C_1Logout Java_sun_security_pkcs11_wrapper_PKCS11_C_1OpenSession Java_sun_security_pkcs11_wrapper_PKCS11_C_1SeedRandom Java_sun_security_pkcs11_wrapper_PKCS11_C_1SetAttributeValue Java_sun_security_pkcs11_wrapper_PKCS11_C_1SetOperationState Java_sun_security_pkcs11_wrapper_PKCS11_C_1Sign Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignRecover Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignRecoverInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignUpdate Java_sun_security_pkcs11_wrapper_PKCS11_C_1UnwrapKey Java_sun_security_pkcs11_wrapper_PKCS11_C_1Verify Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyFinal Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyRecover Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyRecoverInit Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyUpdate Java_sun_security_pkcs11_wrapper_PKCS11_C_1WrapKey Java_sun_security_pkcs11_wrapper_PKCS11_connect Java_sun_security_pkcs11_wrapper_PKCS11_disconnect Java_sun_security_pkcs11_wrapper_PKCS11_finalizeLibrary Java_sun_security_pkcs11_wrapper_PKCS11_initializeLibrary

SpyLogger V1.1/res/bin/jaas_nt.dll

IMPHASH 2066d687e0a1513bffe9dc04dd97e166
SHA256 f18fcdd48057ab80231e13e38e83f0f851873fcb4a378d175c673e030be52b86
MD5 f3db840a0fe8c2907bbb2ebe715b9b07
SHA1 be10935754d9e1d89e8bf4a1b8d066b2802f364e
SHA512 708bf2815b90fedb5a24f362ddf1a568b3b4e0236408deff6f2ac5a3ada302d1ee8790733bfb4bd0cff50b04ca38fcc6db5dba78285a9bb314dc6f8d1bf0df0a
SSDEEP 192:QXw8oxIlgRMPxBq/lxzkvgJZ6lXSpGmMUclDXSVrd3XROq6g:QXtDlTP+dNkvp1zQcpqhBOq6g
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

9372

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jaas_nt.pdb

SpyLogger V1.1/res/bin/jabswitch.exe

IMPHASH 4e0eb6fd80f520cb51e94548bc312d9f
SHA256 a0bfa473df72451bf49713adf3334f81c54910f7fc6a53a2d0a1becc96faa282
MD5 0ef9dfbb3d0cd462810b52e4b49e8f01
SHA1 06332f6606f13718b0f9c353c19b639157bbbf14
SHA512 0e4bf88921bad08a1c3e5bf2dca7084cf38fec363ac4f3f6c5142592c77f80e03c00765cb33d2e33eae2cedbb65e2aa3c0f1cd1fba956b761a4453d7998cd5c5
SSDEEP 384:3QTD35gVf122SIW9Pw4W4misAeec40t5agEZy+AL77BvEQUoyx+njVw/08BmDK+:eD5g122o9Xt10t5xHFHUoM+nZw//BQt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

11528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jabswitch.pdb

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCloseKey

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

user32

wsprintfW

msvcr100

exit strcpy_s vsprintf_s _amsg_exit __getmainargs __C_specific_handler _XcptFilter _exit _cexit wcscpy_s _initterm _initterm_e _configthreadlocale __setusermatherr _commode _fmode __set_app_type __crt_debugger_hook ?terminate@@YAXXZ _unlock __dllonexit _lock _onexit memcpy wcstok_s wcscat_s wcsstr _wcslwr_s wcslen ??2@YAPEAX_K@Z _dupenv_s printf perror strcat_s free fopen_s fprintf fclose remove _errno rename strstr feof fgets _stricmp fputs strtok_s memset __initenv

kernel32

VirtualQuery GetProcessHeap HeapAlloc HeapFree FreeLibrary GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter DecodePointer LoadLibraryW GetProcAddress MultiByteToWideChar WideCharToMultiByte RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess EncodePointer Sleep GetCurrentProcessId ProcessIdToSessionId GetModuleFileNameW GetVersionExW

SpyLogger V1.1/res/bin/java-rmi.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 4c2f6b33fd553d7b58e0ea7c406fc9d8e0275d89c790784d6a1dbed112638f11
MD5 9f9048bfde5dec1a75c72f35516e17be
SHA1 5152cac6eaaebfdbca30c72cab1f5772ad8b5260
SHA512 ba8df394442a055f692dac90a01b1e2bbd5609363aaaaa11dbc334480543484722cde9de3165af895b68b37b62421a85bd8c18f607603d1806ba4705e5cc8d1f
SSDEEP 96:4cEhWo9L+8cWqacPlsgxCWWUPOMZ/EfPO+IiVEforLsXQTVk0MtRleRv5:wWKL2cwsTnMZh+IKEforLJoef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\java-rmi.pdb

SpyLogger V1.1/res/bin/java.dll

IMPHASH b0ff063a1400d02c3018fb92d649b223
SHA256 694c940b75240a3684d799b1b95ba4bbe937354a918d98d55b5a68f7c0ca636f
MD5 3574824de41b8f424c0dd6bd8bc13ec8
SHA1 b33561d535d334480f0fd1d2beca78870c218a4f
SHA512 ca81f6c262123b4e147fdeef31ba0208701bf8c02d296dd6db9fef71064ebed3ec233c89a18518ef03ade45139edba95cc00d68f94f2efde84167efccaaa8767
SSDEEP 3072:NEHOI1cwemaoCi54DOVuAB6y4Hb894TMInVStVgH/6WMvj:0cwlad7KVET7QYxM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

103644

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\java.pdb

jvm

JVM_GetStackAccessControlContext JVM_GetInheritedAccessControlContext JVM_GetArrayLength JVM_GetArrayElement JVM_GetPrimitiveArrayElement JVM_GetLastErrorString jio_vfprintf jio_vsnprintf JVM_GetInterfaceVersion JVM_GetTemporaryDirectory JVM_LatestUserDefinedLoader JVM_GetResourceLookupCache JVM_GetResourceLookupCacheURLs JVM_KnownToNotExist JVM_GetStackTraceElement JVM_GetStackTraceDepth JVM_FillInStackTrace JVM_StartThread JVM_StopThread JVM_IsThreadAlive JVM_SuspendThread JVM_ResumeThread JVM_SetThreadPriority JVM_Yield JVM_Sleep JVM_CurrentThread JVM_CountStackFrames JVM_Interrupt JVM_IsInterrupted JVM_HoldsLock JVM_GetAllThreads JVM_DumpThreads JVM_SetNativeThreadName JVM_InitProperties JVM_CurrentTimeMillis JVM_NanoTime JVM_ArrayCopy JVM_InternString JVM_RaiseSignal JVM_RegisterSignal JVM_FindSignal JVM_Halt JVM_ClassLoaderDepth JVM_ClassDepth JVM_CurrentClassLoader JVM_CurrentLoadedClass JVM_GetClassContext JVM_ActiveProcessorCount JVM_TraceMethodCalls JVM_TraceInstructions JVM_GC JVM_MaxMemory JVM_TotalMemory JVM_FreeMemory JVM_GetClassAccessFlags JVM_GetCallerClass JVM_GetThreadInterruptEvent JVM_GetSystemPackages JVM_GetSystemPackage JVM_IHashCode JVM_MonitorWait JVM_MonitorNotify JVM_MonitorNotifyAll JVM_Clone JVM_NewInstanceFromConstructor JVM_InvokeMethod JVM_MaxObjectInspectionAge JVM_GetFieldTypeAnnotations JVM_GetMethodTypeAnnotations JVM_GetMethodParameters JVM_ConstantPoolGetUTF8At JVM_ConstantPoolGetStringAt JVM_ConstantPoolGetDoubleAt JVM_ConstantPoolGetFloatAt JVM_ConstantPoolGetLongAt JVM_ConstantPoolGetIntAt JVM_ConstantPoolGetMemberRefInfoAt JVM_ConstantPoolGetFieldAtIfLoaded JVM_ConstantPoolGetFieldAt JVM_ConstantPoolGetMethodAtIfLoaded JVM_ConstantPoolGetMethodAt JVM_ConstantPoolGetClassAtIfLoaded JVM_ConstantPoolGetClassAt JVM_ConstantPoolGetSize JVM_CompileClass JVM_CompileClasses JVM_CompilerCommand JVM_EnableCompiler JVM_DisableCompiler JVM_LoadLibrary JVM_UnloadLibrary JVM_IsSupportedJNIVersion JVM_FindLibraryEntry JVM_FindLoadedClass JVM_FindClassFromBootLoader JVM_ResolveClass JVM_DefineClassWithSource JVM_AssertionStatusDirectives JVM_FindPrimitiveClass JVM_FindClassFromCaller JVM_GetClassName JVM_GetClassInterfaces JVM_IsInterface JVM_GetClassSigners JVM_SetClassSigners JVM_IsArrayClass JVM_IsPrimitiveClass JVM_GetComponentType JVM_GetClassModifiers JVM_GetClassDeclaredFields JVM_GetClassDeclaredMethods JVM_GetClassDeclaredConstructors JVM_GetProtectionDomain JVM_GetDeclaredClasses JVM_GetDeclaringClass JVM_GetClassSignature JVM_GetClassAnnotations JVM_GetClassConstantPool JVM_DesiredAssertionStatus JVM_GetEnclosingMethodInfo JVM_GetClassTypeAnnotations JVM_SupportsCX8 JVM_NewMultiArray JVM_NewArray JVM_SetPrimitiveArrayElement JVM_SetArrayElement JVM_DoPrivileged

verify

VerifyClass VerifyClassForMajorVersion VerifyFixClassname VerifyClassname

advapi32

RegQueryValueExW RegOpenKeyExW RegEnumKeyExA RegQueryInfoKeyA RegCloseKey RegOpenKeyExA CryptReleaseContext CryptGenRandom CryptAcquireContextA RegCreateKeyExA RegDeleteKeyA RegFlushKey RegSetValueExA RegDeleteValueA RegEnumValueA GetUserNameW RegQueryValueExA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

msvcr100

strrchr fprintf isdigit _wgetenv wcsncat sscanf atoi strncpy _wcserror wcsncpy _wgetcwd _wgetdcwd _wfullpath towupper memcpy _fullpath isalpha calloc mbstowcs strerror_s __C_specific_handler _malloc_crt _initterm _initterm_e _encoded_null _amsg_exit __CppXcptFilter __crt_debugger_hook __clean_type_info_names_internal _unlock __dllonexit _lock _onexit setlocale toupper wcschr strchr iswctype free malloc strlen strcpy sprintf wcscmp wcslen wcscat_s wcscpy _wcsdup __iob_func _isnan _vswprintf_c_l memset strcmp memcmp wcstombs _strdup fclose fgets fopen strcat realloc wcsncmp _wcsupr _wstat64 wcscat _errno _wrename

kernel32

FreeLibrary LocalAlloc GetModuleFileNameA GetSystemDirectoryA LoadLibraryA GetTempPathW GetNativeSystemInfo GetSystemDirectoryW GetSystemDefaultLCID GetCurrentDirectoryW GetSystemInfo IsProcessorFeaturePresent GetLocaleInfoA IsValidCodePage GetWindowsDirectoryA GetFileSizeEx SetFilePointerEx WriteFile ReadFile SetFilePointer SetEndOfFile FlushFileBuffers GetNumberOfConsoleInputEvents PeekConsoleInputA PeekNamedPipe GetDriveTypeW FindFirstFileA IsDBCSLeadByte GetVolumePathNameW GetDiskFreeSpaceExW GetLogicalDrives SetFileTime CreateDirectoryW FindNextFileW RemoveDirectoryW DeleteFileW RaiseException SetFileAttributesW GetFileAttributesW GetFullPathNameW GetFileAttributesExW FindFirstFileW FindClose GetFileInformationByHandle SetLastError GetModuleHandleExW SetErrorMode GetVersionExA GetTimeZoneInformation MultiByteToWideChar CreateFileW TerminateProcess WaitForMultipleObjects GetExitCodeProcess GetConsoleWindow CreateProcessW CreatePipe SetHandleInformation GetHandleInformation CloseHandle GetLastError WideCharToMultiByte FormatMessageW GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetUserDefaultLCID GetUserDefaultUILanguage GetModuleHandleA GetProcAddress GetConsoleMode SetConsoleMode GetConsoleCP GetStdHandle GetFileType EncodePointer DecodePointer Sleep GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DisableThreadLibraryCalls QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetFileTime

Canonicalize GetStringPlatformChars JDK_GetVersionInfo0 JDK_LoadSystemLibrary JNI_OnLoad JNU_CallMethodByName JNU_CallMethodByNameV JNU_CallStaticMethodByName JNU_ClassClass JNU_ClassObject JNU_ClassString JNU_ClassThrowable JNU_CopyObjectArray JNU_Equals JNU_GetEnv JNU_GetFieldByName JNU_GetStaticFieldByName JNU_GetStringPlatformChars JNU_IsInstanceOfByName JNU_MonitorWait JNU_NewObjectByName JNU_NewStringPlatform JNU_Notify JNU_NotifyAll JNU_PrintClass JNU_PrintString JNU_ReleaseStringPlatformChars JNU_SetFieldByName JNU_SetStaticFieldByName JNU_ThrowArrayIndexOutOfBoundsException JNU_ThrowByName JNU_ThrowByNameWithLastError JNU_ThrowByNameWithMessageAndLastError JNU_ThrowClassNotFoundException JNU_ThrowIOException JNU_ThrowIOExceptionWithLastError JNU_ThrowIllegalAccessError JNU_ThrowIllegalAccessException JNU_ThrowIllegalArgumentException JNU_ThrowInstantiationException JNU_ThrowInternalError JNU_ThrowNoSuchFieldError JNU_ThrowNoSuchFieldException JNU_ThrowNoSuchMethodError JNU_ThrowNoSuchMethodException JNU_ThrowNullPointerException JNU_ThrowNumberFormatException JNU_ThrowOutOfMemoryError JNU_ThrowStringIndexOutOfBoundsException JNU_ToString Java_java_io_Console_echo Java_java_io_Console_encoding Java_java_io_Console_istty Java_java_io_FileDescriptor_initIDs Java_java_io_FileDescriptor_set Java_java_io_FileDescriptor_sync Java_java_io_FileInputStream_available0 Java_java_io_FileInputStream_close0 Java_java_io_FileInputStream_initIDs Java_java_io_FileInputStream_open0 Java_java_io_FileInputStream_read0 Java_java_io_FileInputStream_readBytes Java_java_io_FileInputStream_skip0 Java_java_io_FileOutputStream_close0 Java_java_io_FileOutputStream_initIDs Java_java_io_FileOutputStream_open0 Java_java_io_FileOutputStream_write Java_java_io_FileOutputStream_writeBytes Java_java_io_ObjectInputStream_bytesToDoubles Java_java_io_ObjectInputStream_bytesToFloats Java_java_io_ObjectOutputStream_doublesToBytes Java_java_io_ObjectOutputStream_floatsToBytes Java_java_io_ObjectStreamClass_hasStaticInitializer Java_java_io_ObjectStreamClass_initNative Java_java_io_RandomAccessFile_close0 Java_java_io_RandomAccessFile_getFilePointer Java_java_io_RandomAccessFile_initIDs Java_java_io_RandomAccessFile_length Java_java_io_RandomAccessFile_open0 Java_java_io_RandomAccessFile_read0 Java_java_io_RandomAccessFile_readBytes Java_java_io_RandomAccessFile_seek0 Java_java_io_RandomAccessFile_setLength Java_java_io_RandomAccessFile_write0 Java_java_io_RandomAccessFile_writeBytes Java_java_io_WinNTFileSystem_canonicalize0 Java_java_io_WinNTFileSystem_canonicalizeWithPrefix0 Java_java_io_WinNTFileSystem_checkAccess Java_java_io_WinNTFileSystem_createDirectory Java_java_io_WinNTFileSystem_createFileExclusively Java_java_io_WinNTFileSystem_delete0 Java_java_io_WinNTFileSystem_getBooleanAttributes Java_java_io_WinNTFileSystem_getDriveDirectory Java_java_io_WinNTFileSystem_getLastModifiedTime Java_java_io_WinNTFileSystem_getLength Java_java_io_WinNTFileSystem_getSpace0 Java_java_io_WinNTFileSystem_initIDs Java_java_io_WinNTFileSystem_list Java_java_io_WinNTFileSystem_listRoots0 Java_java_io_WinNTFileSystem_rename0 Java_java_io_WinNTFileSystem_setLastModifiedTime Java_java_io_WinNTFileSystem_setPermission Java_java_io_WinNTFileSystem_setReadOnly Java_java_lang_ClassLoader_00024NativeLibrary_find Java_java_lang_ClassLoader_00024NativeLibrary_load Java_java_lang_ClassLoader_00024NativeLibrary_unload Java_java_lang_ClassLoader_defineClass0 Java_java_lang_ClassLoader_defineClass1 Java_java_lang_ClassLoader_defineClass2 Java_java_lang_ClassLoader_findBootstrapClass Java_java_lang_ClassLoader_findBuiltinLib Java_java_lang_ClassLoader_findLoadedClass0 Java_java_lang_ClassLoader_registerNatives Java_java_lang_ClassLoader_resolveClass0 Java_java_lang_Class_forName0 Java_java_lang_Class_getPrimitiveClass Java_java_lang_Class_isAssignableFrom Java_java_lang_Class_isInstance Java_java_lang_Class_registerNatives Java_java_lang_Compiler_registerNatives Java_java_lang_Double_doubleToRawLongBits Java_java_lang_Double_longBitsToDouble Java_java_lang_Float_floatToRawIntBits Java_java_lang_Float_intBitsToFloat Java_java_lang_Object_getClass Java_java_lang_Object_registerNatives Java_java_lang_Package_getSystemPackage0 Java_java_lang_Package_getSystemPackages0 Java_java_lang_ProcessEnvironment_environmentBlock Java_java_lang_ProcessImpl_closeHandle Java_java_lang_ProcessImpl_create Java_java_lang_ProcessImpl_getExitCodeProcess Java_java_lang_ProcessImpl_getStillActive Java_java_lang_ProcessImpl_isProcessAlive Java_java_lang_ProcessImpl_openForAtomicAppend Java_java_lang_ProcessImpl_terminateProcess Java_java_lang_ProcessImpl_waitForInterruptibly Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly Java_java_lang_Runtime_availableProcessors Java_java_lang_Runtime_freeMemory Java_java_lang_Runtime_gc Java_java_lang_Runtime_maxMemory Java_java_lang_Runtime_runFinalization0 Java_java_lang_Runtime_totalMemory Java_java_lang_Runtime_traceInstructions Java_java_lang_Runtime_traceMethodCalls Java_java_lang_SecurityManager_classDepth Java_java_lang_SecurityManager_classLoaderDepth0 Java_java_lang_SecurityManager_currentClassLoader0 Java_java_lang_SecurityManager_currentLoadedClass0 Java_java_lang_SecurityManager_getClassContext Java_java_lang_Shutdown_halt0 Java_java_lang_Shutdown_runAllFinalizers Java_java_lang_StrictMath_IEEEremainder Java_java_lang_StrictMath_acos Java_java_lang_StrictMath_asin Java_java_lang_StrictMath_atan Java_java_lang_StrictMath_atan2 Java_java_lang_StrictMath_cbrt Java_java_lang_StrictMath_cos Java_java_lang_StrictMath_cosh Java_java_lang_StrictMath_exp Java_java_lang_StrictMath_expm1 Java_java_lang_StrictMath_hypot Java_java_lang_StrictMath_log Java_java_lang_StrictMath_log10 Java_java_lang_StrictMath_log1p Java_java_lang_StrictMath_pow Java_java_lang_StrictMath_sin Java_java_lang_StrictMath_sinh Java_java_lang_StrictMath_sqrt Java_java_lang_StrictMath_tan Java_java_lang_StrictMath_tanh Java_java_lang_String_intern Java_java_lang_System_identityHashCode Java_java_lang_System_initProperties Java_java_lang_System_mapLibraryName Java_java_lang_System_registerNatives Java_java_lang_System_setErr0 Java_java_lang_System_setIn0 Java_java_lang_System_setOut0 Java_java_lang_Thread_registerNatives Java_java_lang_Throwable_fillInStackTrace Java_java_lang_Throwable_getStackTraceDepth Java_java_lang_Throwable_getStackTraceElement Java_java_lang_reflect_Array_get Java_java_lang_reflect_Array_getBoolean Java_java_lang_reflect_Array_getByte Java_java_lang_reflect_Array_getChar Java_java_lang_reflect_Array_getDouble Java_java_lang_reflect_Array_getFloat Java_java_lang_reflect_Array_getInt Java_java_lang_reflect_Array_getLength Java_java_lang_reflect_Array_getLong Java_java_lang_reflect_Array_getShort Java_java_lang_reflect_Array_multiNewArray Java_java_lang_reflect_Array_newArray Java_java_lang_reflect_Array_set Java_java_lang_reflect_Array_setBoolean Java_java_lang_reflect_Array_setByte Java_java_lang_reflect_Array_setChar Java_java_lang_reflect_Array_setDouble Java_java_lang_reflect_Array_setFloat Java_java_lang_reflect_Array_setInt Java_java_lang_reflect_Array_setLong Java_java_lang_reflect_Array_setShort Java_java_lang_reflect_Executable_getParameters0 Java_java_lang_reflect_Executable_getTypeAnnotationBytes0 Java_java_lang_reflect_Field_getTypeAnnotationBytes0 Java_java_lang_reflect_Proxy_defineClass0 Java_java_nio_Bits_copyFromIntArray Java_java_nio_Bits_copyFromLongArray Java_java_nio_Bits_copyFromShortArray Java_java_nio_Bits_copyToIntArray Java_java_nio_Bits_copyToLongArray Java_java_nio_Bits_copyToShortArray Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2 Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedAction_2Ljava_security_AccessControlContext_2 Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2 Java_java_security_AccessController_doPrivileged__Ljava_security_PrivilegedExceptionAction_2Ljava_security_AccessControlContext_2 Java_java_security_AccessController_getInheritedAccessControlContext Java_java_security_AccessController_getStackAccessControlContext Java_java_util_TimeZone_getSystemGMTOffsetID Java_java_util_TimeZone_getSystemTimeZoneID Java_java_util_concurrent_atomic_AtomicLong_VMSupportsCS8 Java_java_util_logging_FileHandler_isSetUID Java_java_util_prefs_WindowsPreferences_WindowsRegCloseKey Java_java_util_prefs_WindowsPreferences_WindowsRegCreateKeyEx Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteKey Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteValue Java_java_util_prefs_WindowsPreferences_WindowsRegEnumKeyEx Java_java_util_prefs_WindowsPreferences_WindowsRegEnumValue Java_java_util_prefs_WindowsPreferences_WindowsRegFlushKey Java_java_util_prefs_WindowsPreferences_WindowsRegOpenKey Java_java_util_prefs_WindowsPreferences_WindowsRegQueryInfoKey Java_java_util_prefs_WindowsPreferences_WindowsRegQueryValueEx Java_java_util_prefs_WindowsPreferences_WindowsRegSetValueEx Java_sun_io_Win32ErrorMode_setErrorMode Java_sun_misc_GC_maxObjectInspectionAge Java_sun_misc_MessageUtils_toStderr Java_sun_misc_MessageUtils_toStdout Java_sun_misc_NativeSignalHandler_handle0 Java_sun_misc_Signal_findSignal Java_sun_misc_Signal_handle0 Java_sun_misc_Signal_raise0 Java_sun_misc_URLClassPath_getLookupCacheForClassLoader Java_sun_misc_URLClassPath_getLookupCacheURLs Java_sun_misc_URLClassPath_knownToNotExist0 Java_sun_misc_VMSupport_getVMTemporaryDirectory Java_sun_misc_VMSupport_initAgentProperties Java_sun_misc_VM_getThreadStateValues Java_sun_misc_VM_initialize Java_sun_misc_VM_latestUserDefinedLoader Java_sun_misc_Version_getJdkSpecialVersion Java_sun_misc_Version_getJdkVersionInfo Java_sun_misc_Version_getJvmSpecialVersion Java_sun_misc_Version_getJvmVersionInfo Java_sun_reflect_ConstantPool_getClassAt0 Java_sun_reflect_ConstantPool_getClassAtIfLoaded0 Java_sun_reflect_ConstantPool_getDoubleAt0 Java_sun_reflect_ConstantPool_getFieldAt0 Java_sun_reflect_ConstantPool_getFieldAtIfLoaded0 Java_sun_reflect_ConstantPool_getFloatAt0 Java_sun_reflect_ConstantPool_getIntAt0 Java_sun_reflect_ConstantPool_getLongAt0 Java_sun_reflect_ConstantPool_getMemberRefInfoAt0 Java_sun_reflect_ConstantPool_getMethodAt0 Java_sun_reflect_ConstantPool_getMethodAtIfLoaded0 Java_sun_reflect_ConstantPool_getSize0 Java_sun_reflect_ConstantPool_getStringAt0 Java_sun_reflect_ConstantPool_getUTF8At0 Java_sun_reflect_NativeConstructorAccessorImpl_newInstance0 Java_sun_reflect_NativeMethodAccessorImpl_invoke0 Java_sun_reflect_Reflection_getCallerClass__ Java_sun_reflect_Reflection_getCallerClass__I Java_sun_reflect_Reflection_getClassAccessFlags Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit NewStringPlatform VerifyClassCodes VerifyClassCodesForMajorVersion getEncodingFromLangID getErrorString getJavaIDFromLangID handleLseek handleRead jio_fprintf jio_snprintf winFileHandleOpen

SpyLogger V1.1/res/bin/java.exe

IMPHASH bb9f83f2ccf071025cfcf6c07dc24b5c
SHA256 5fdd2554e7ae7cf57f93a11c29c440cd320f755753d981931744a20c5ab39d56
MD5 f36d2600aef1a4fc239408e5d448bcd6
SHA1 52abebdcfa11cb6a8c55a3ee18a48f2dd2878411
SHA512 8077267092df45f9a134e5c1e66a854257d4a6c71828f56fb79633f0be4f9a1c367673b6d60a24a57e4050b078c877e5c638990ac47fe256d0e5200a500cd2ee
SSDEEP 3072:pALAPqYhJVP63QoUTHjT/h7dT7qKRHuMl/Kby6oyQSUjTBfd22KXN3HT:fxJ034n/VdT7tOiKby6ozFjTBq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

43200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\objs\java_objs\java.pdb

advapi32

RegCloseKey RegOpenKeyExA RegEnumKeyA RegQueryValueExA

user32

CharNextExA MessageBoxA

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer HeapFree MultiByteToWideChar GetCurrentProcessId EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetFileAttributesA ExitThread GetCurrentThreadId CreateThread SetFilePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoW HeapSetInformation GetVersion HeapCreate GetTickCount GetSystemTimeAsFileTime SetEnvironmentVariableW SetEnvironmentVariableA Sleep SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW

SpyLogger V1.1/res/bin/java_crw_demo.dll

IMPHASH e4c393924faaccc98a02983f6f2bccc4
SHA256 fa557ca6efd07027f34eef10c978d901623a4fbdb4e37859fc1864c6c58f65cc
MD5 917e34402f7409857f0991d0ec3b312c
SHA1 c06b848fc5a60d9969eaed33a323f8fc33383844
SHA512 e015ed3bceb510226b3ccda7046ef05cde948f03c091fa61aedb6f6c1c1b5ac6c2564f38c04e4c19aa38fbcb47e2d0cfb18086d17872610c1c4cb118c8888e62
SSDEEP 384:xfnpNch5aX2kbY0VYUdC9RkEtUl/aSvLhMzZa+1rmUd4IK87vgECk6qug:zNAYX7bzYUknm2ZlmUdoRn0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

17940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\java_crw_demo.pdb

SpyLogger V1.1/res/bin/javaw.exe

IMPHASH 2d6f4e096a2d15d4349a455f88e1f66e
SHA256 b2717cee2309e0301874f4084b5037f8f539400004a03d9cb54ea2951633689e
MD5 4c82494be2b89f3595ca67cf742d9f12
SHA1 69b9b66d1a9be55110f6681d0c69fd9da5db2b55
SHA512 5d2f0142287c3271f2648e06bafc34c8112d74803dc953411c28bc457a1039e4a9ae0ef1cfdef88c97ddec625e2375590c289f34ad4ae5bedffbf283076968fa
SSDEEP 3072:IHIr7TWFcojQ4yo6XL0tws/lzBuTLdzTmFqVIeGaIs6TbGajTBfWeFxXxk/HmX:tTWPjQN8tRFuTLdmGIebIsciajTBhkW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

43252

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\javaw.pdb

advapi32

RegCloseKey RegOpenKeyExA RegEnumKeyA RegQueryValueExA

user32

CharNextExA MessageBoxA

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer GetStartupInfoW HeapFree MultiByteToWideChar GetCurrentProcessId EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetFileAttributesA ExitThread GetCurrentThreadId CreateThread SetFilePointer InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapSetInformation GetVersion HeapCreate GetTickCount GetSystemTimeAsFileTime SetEnvironmentVariableW SetEnvironmentVariableA Sleep SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW

SpyLogger V1.1/res/bin/jawt.dll

IMPHASH 6a9b2c610f7015156efcd687c5f40b89
SHA256 6010fb4112b21120d93b834a2285cb1ca9b83542d0eb7a6ca011e3d528f67a62
MD5 6bff9486403069e1c650bbe7a9357244
SHA1 50a10b9d20475c64e73e69ea9368d9f04b885eb3
SHA512 501795b3c7ebe69feaea617579d5d23f62b396f5a4e01a97096d37b4b43f0845e84e39c4afa60fdbc5e293febaf5ee3106957843cce1e39e819ef728c6490bda
SSDEEP 96:zSq01JFS14/aKXSWv9UuA33wWoE3X9YX8lu09:zSqCTJfv9U+PE3X968l7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jawt.pdb

SpyLogger V1.1/res/bin/jdwp.dll

IMPHASH f7abbecf9035db228855fd9a9118b434
SHA256 3bcf774d2784c40543a9af9ccc570bd7a9d67d24302b2ca9c3bbb586d1f5e95b
MD5 8f742e795e9490d44e9ea00442ff7964
SHA1 9dd9d670f41bba433ea0c89a689068f96da408ac
SHA512 e07d0b9ff631033a0f3d4418c072d12fbccb8c63a94372730d5b4a0f0a9377eeb153316de0c6df5cd2896a4ff5d681e0f7edd4cfd96c8b5b4a8957119c8f99b5
SSDEEP 3072:CSEIVwvZpuhGVnAgo09nq2krhr6nXTpkPFNGSWj4lSMcFmjFlLYfAFBejM1DHYb:CwMAUqnlU69hcfypRHY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

157496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jdwp.pdb

SpyLogger V1.1/res/bin/jjs.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 8437fe22bd7783b0ab0c1c38577ff37f831c87d03bf7607e6142fd88eb6d2437
MD5 7d82084717aaa23bbf0bc98990b46f04
SHA1 628dba40a90003a0c96fedfdc667849be777c04f
SHA512 9f6dc5f209da26de7d061b396f5fbdc2059d736932b1299ab96fb657afede6afe5c20ed36bc2ca6cddb6aeb16223d410ab2db46959f8be80918b060d8b3a1e79
SSDEEP 96:f8bF1rCl6MvKqgRiWOBNe6YZ1xyV3e+IiVEfoGiXwsPVk0itRleRv5:0bFyTHT/nYZbG3pIKEfolZmef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jjs.pdb

SpyLogger V1.1/res/bin/jli.dll

IMPHASH 1a6b67becfdddad1a6f8feabd3928725
SHA256 9ffe0d8866e8926589c038c292aef13293076b409d09e5ada23b532b2470420e
MD5 5f53628e1d3373323b89c319a7c24b18
SHA1 0037b9dcbb51c5a9195af042a45faecd9df63f5f
SHA512 ebabd2efd0c5f53801112703dbf7020cfb8ee4d70cf81de2734a07fd1409a386e22072350267d06f1013c730fa2534b70529dc02a921acb3e7b29870e4b8b189
SSDEEP 3072:/ssME/DxKjT8rGAyOI3OT1GGCYELUTLOu/FAM7yPp3CxbTBf8Wa90IQO:/zfE8ycqOASEQTJFAM7yPhkbTBMS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

54508

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jli.pdb

advapi32

RegCloseKey RegOpenKeyExA RegEnumKeyA RegQueryValueExA

comctl32

InitCommonControlsEx

user32

CharNextExA MessageBoxA

kernel32

CreateFileW GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetCommandLineA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose HeapFree MultiByteToWideChar GetCurrentProcessId EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess DecodePointer FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetFileAttributesA ExitThread GetCurrentThreadId CreateThread HeapAlloc HeapReAlloc SetFilePointer FlsSetValue TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetVersion HeapCreate HeapDestroy EncodePointer WideCharToMultiByte RtlUnwindEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEnvironmentVariableW SetEnvironmentVariableA Sleep SetHandleCount GetStdHandle GetFileType GetStartupInfoW LoadLibraryW FlsGetValue FlsFree SetLastError FlsAlloc WriteFile GetModuleFileNameW GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetTickCount GetSystemTimeAsFileTime CompareStringW HeapSize ReadFile GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW WriteConsoleW GetStringTypeW

SpyLogger V1.1/res/bin/jpeg.dll

IMPHASH e1f56dfca40a8b110b0a5b927764183f
SHA256 eda7b2e6290f024b74e4c22917d510c1717eb34bf2bcf59cc2162a6addc15a17
MD5 be09fe0872856236e8f208a06b68c684
SHA1 8c90ddbe7bc7801f03802df7455f37cb1eb4bedd
SHA512 a4e70c1fd6fe8e5a42f6c2c32913fa84922f5de605cdbb5bc447226654a7a7b97f72137c509e568545d7b268d250d965066105d9607a29f063d7e55a41601012
SSDEEP 3072:R3WKK7SlZvBlUthO9wmbYWrUqJGjDek/v4qJ8oXzrpqBoqm81Loq9:R9oSlZvBWrHmbBrzJoDdoqJ8oXzUBq8p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

125228

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jpeg.pdb

SpyLogger V1.1/res/bin/jsdt.dll

IMPHASH 654291c91153b208d42e521bbb6adde4
SHA256 95c20480cef045bd08c42fa157ffbc97f37f9341930da58f6b272980953588ee
MD5 2dcea1087ef1bb5403c73538d66e79dc
SHA1 8a7953d5d285ab7b153faa26100167217ccd6060
SHA512 42cecaf5a67592ae78b302d8763c78c7dfca7448eefb117e098d9f1aab43eb22c438c004aeab5aef70106ebe517cdb3680606ef8060fe773d4a7814bdbe21526
SSDEEP 192:ZGfP6mTjDGbDV2rf+d1yOwdj2oRSMa0mGm8rOUfPeJQdb7dE9w4qg5hQgvBV3XQB:ZGfP60j6bZ2rfkyqeSMmGm8qFJhSqeWG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jsdt.pdb

SpyLogger V1.1/res/bin/jsound.dll

IMPHASH 61eddfc589b47b0bb8f2f3659752c99e
SHA256 07b745ee71f65ec39f13bb204bc908d0769aa0aeaa8ab3f7213578cc36cc2558
MD5 2b3a455583d3c0f9b61a36a4bed578b7
SHA1 96f3fa8250367999a89189de9fa2fe126fed13e4
SHA512 179803383371c482b245aa784a5af0d1abb50a11e62d8608cdb8c1e40f5d257729336d366e64a675ba64a14fe4d613f1175e5ee44aef4fe51d9ddb6be88abd00
SSDEEP 384:vUf2esSw2/uXqQm3He+W97w3VWak8BrkuGLvtUeCsb7il5ICxWwAk6dIQ:vVea88w3VzZBr/UjCL5IoAmQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

19736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jsound.pdb

winmm

timeGetTime mixerOpen mixerSetControlDetails mixerGetControlDetailsA mixerClose mixerGetDevCapsA mixerGetLineControlsA mixerGetLineInfoA mixerGetNumDevs midiOutPrepareHeader midiOutLongMsg timeEndPeriod midiOutReset midiOutClose midiOutOpen midiOutShortMsg timeBeginPeriod midiOutUnprepareHeader midiOutGetDevCapsA midiOutGetNumDevs midiOutGetErrorTextA midiInStop midiInStart midiInReset midiInClose midiInUnprepareHeader midiInPrepareHeader midiInGetDevCapsA midiInGetNumDevs midiInGetErrorTextA midiInOpen midiInAddBuffer

msvcr100

__clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter _amsg_exit _encoded_null memcpy strcpy strncpy sprintf free memset malloc __C_specific_handler _unlock __dllonexit _lock _onexit _malloc_crt _initterm _initterm_e

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSection CreateThread Sleep CreateEventA WaitForSingleObject EnterCriticalSection CloseHandle LeaveCriticalSection SetEvent

Java_com_sun_media_sound_MidiInDeviceProvider_nGetDescription Java_com_sun_media_sound_MidiInDeviceProvider_nGetName Java_com_sun_media_sound_MidiInDeviceProvider_nGetNumDevices Java_com_sun_media_sound_MidiInDeviceProvider_nGetVendor Java_com_sun_media_sound_MidiInDeviceProvider_nGetVersion Java_com_sun_media_sound_MidiInDevice_nClose Java_com_sun_media_sound_MidiInDevice_nGetMessages Java_com_sun_media_sound_MidiInDevice_nGetTimeStamp Java_com_sun_media_sound_MidiInDevice_nOpen Java_com_sun_media_sound_MidiInDevice_nStart Java_com_sun_media_sound_MidiInDevice_nStop Java_com_sun_media_sound_MidiOutDeviceProvider_nGetDescription Java_com_sun_media_sound_MidiOutDeviceProvider_nGetName Java_com_sun_media_sound_MidiOutDeviceProvider_nGetNumDevices Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVendor Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVersion Java_com_sun_media_sound_MidiOutDevice_nClose Java_com_sun_media_sound_MidiOutDevice_nGetTimeStamp Java_com_sun_media_sound_MidiOutDevice_nOpen Java_com_sun_media_sound_MidiOutDevice_nSendLongMessage Java_com_sun_media_sound_MidiOutDevice_nSendShortMessage Java_com_sun_media_sound_Platform_nGetExtraLibraries Java_com_sun_media_sound_Platform_nGetLibraryForFeature Java_com_sun_media_sound_Platform_nIsBigEndian Java_com_sun_media_sound_Platform_nIsSigned8 Java_com_sun_media_sound_PortMixerProvider_nGetNumDevices Java_com_sun_media_sound_PortMixerProvider_nNewPortMixerInfo Java_com_sun_media_sound_PortMixer_nClose Java_com_sun_media_sound_PortMixer_nControlGetFloatValue Java_com_sun_media_sound_PortMixer_nControlGetIntValue Java_com_sun_media_sound_PortMixer_nControlSetFloatValue Java_com_sun_media_sound_PortMixer_nControlSetIntValue Java_com_sun_media_sound_PortMixer_nGetControls Java_com_sun_media_sound_PortMixer_nGetPortCount Java_com_sun_media_sound_PortMixer_nGetPortName Java_com_sun_media_sound_PortMixer_nGetPortType Java_com_sun_media_sound_PortMixer_nOpen

SpyLogger V1.1/res/bin/jsoundds.dll

IMPHASH eb8a1b4f567e3f476e1cde7fd25dfbe1
SHA256 069a1a6b78b6d79ccf6c5427103958ffa733001efd4c5bd2053893d92dfed7ae
MD5 8430b39f616cc34641e02d2079508c89
SHA1 7debb21fbcab71a3753332e8a821a8a679d73e82
SHA512 ff8d5d8b7c6d49f6fd9f138b129c29a22fff284d2029cb82352e9e6d45cd2a3cc65aa6b39558621450258267295fef31ec68afcba1693a9fda77a8228af8e21b
SSDEEP 384:9+gpHO6ATxs0ub05FNHk3gj3ZkhTw/AMOnu1vNHwK8Bcrp6Wui:cg81s0ubk6QzZ2QFEarhui
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

19220

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\jsoundds.pdb

SpyLogger V1.1/res/bin/key.pk8

SHA256 ca7800e209736c19fb717ccfffd82a121e7d18e3be3578649b5bcd3c4d74da97
MD5 385c3125be83084244ed151f9c828e74
SHA1 b2df70890838e05c74d2a674b175b24afce68748
SHA512 5d4e7b73061799ef0b0eedd9bb0144aced9bf8c8c53ed0bf5f4556c7bf2c440a686df14bcec3bc8a87eedcc7d509b580350aa726920c57b7acc2564500033f76
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/keytool.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 c8ecf11a01b10c0079d86703bc1bb876db457832203077413ec024ebe06bcfc0
MD5 665def10b05de252f6d01181eb823ec5
SHA1 06fb93db05a8fdb0f18c5247f1740e36d8ae58cc
SHA512 7269add5dd464e3e854076a56ee89ba12ede31c7d398cb4db73145d9f0285836629eb7475f7c61ca2e34dd9be0924c7345f4de4c0d4596f2e7bb905fbb426739
SSDEEP 96:1j91rCl6MvKKgRiWOBYR8ZyxyFXIiVEfossMK0bTVk02tRleRv5:1j9yTHT2R8ZeSXIKEfo1MXeef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\keytool.pdb

SpyLogger V1.1/res/bin/kinit.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 5a32ab53104b1b1f315a0d02aef0dd94ca6f635394ed9e1dbf052a06f13db731
MD5 c39bb7cec5b2173480e27a00ab855fe5
SHA1 ecaafc542f420129af4b8556c4c34c0e46f0bb80
SHA512 0ced5d6c1b5a0da96c7257df58e0d1bbef3f89484a5f6ce1c690ab111944b492cf9b8e80e8c76ff525e1b0b7ff7a3cc60ee3e63b7996474725205398b006bc8b
SSDEEP 96:EL11rCl6MvKqgRiWOBzGOZxxygZIIiVEfon0ftsJVk08tRleRv5:EL1yTnT5GOZvjZIIKEfoIs+ef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\kinit.pdb

SpyLogger V1.1/res/bin/klist.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 a3cb8fc98b973ef7ddce229f5f34f3b5ce5252e7fdbc5c2fb01b554c6075befd
MD5 d65ef19b78847c232d95abbf8587c3e5
SHA1 080f6d107b845cec8d06c7df0cd903dd9e620c18
SHA512 f8b4e89b7f5da011db2d193717a813654fa3612e97b775d37fcd59e6cdf907279400a8322df3b2cada591693a9aa02f11b942828d7eca498ad242f730ab45906
SSDEEP 96:6ML11rCl6MvKqgRiWOBzG0ZixygZIIiVEfon0fi5Vk0itRleRv5:lL1yTnT5G0ZOjZIIKEfozQef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\klist.pdb

SpyLogger V1.1/res/bin/ktab.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 87d8c51f02f1dfd1bbb45296bd776007edfc58e89ce79c0a974a74674cbe1130
MD5 396609fc5c059d53aa50bd7cf574778d
SHA1 2df5a26d0c89d718077e2b4b53a318f6da448912
SHA512 ee31d2b27ae50c6426e569bd3908892f16047ddd00c48376e8ad48e1b1788d5ec768f1033ceb5e140616e1622b4c38a41a2033afd2d40e03cfaec95d5b1a8210
SSDEEP 96:hL11rCl6MvKqgRiWOBztDZUxygZIIiVEfonpfZwVk0ftRleRv5:hL1yTnT5tDZsjZIIKEfoXeef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\ktab.pdb

SpyLogger V1.1/res/bin/lcms.dll

IMPHASH 509b004d850141ddd7bc12ad0be6a9df
SHA256 d445f5ea909116d5573a14000466e853a476a2ff4ee4c8459d1ef21da9dc1ea2
MD5 05f08de81b6f6caec8df3db6c54f0db6
SHA1 6ca3984ee45ad12da99b79a21eae2ba50c27014e
SHA512 6a8f3c344dcd16f6312a5dec88395e6ff6ffed96e7e8a2deaf35dfc0bc48cda71301dd0ca011d9ef36881503f2f9fb95a8e6898cd4fbaed16126115fe4881906
SSDEEP 3072:GTLfNcL9lG9Q48FeRuOuU5KNEI7OWHwszwxsGYORdOYedlB3KtW1GXDHdEP66:GTBM9lAx5OEI7ONszisWRcPKBzHdt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

166604

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\lcms.pdb

SpyLogger V1.1/res/bin/management.dll

IMPHASH 29f8c884ec18a6ffb516bf022398dc58
SHA256 1d57546b08eeded90318e177909ecf0c6d9a4bf8c6eb6e112e94f56f92da2de9
MD5 03ab73e706d9f327f86d9fcceafc687b
SHA1 c3cf2795cae9c21864a13c22aae0a9017f7c4dcd
SHA512 c45e3de4cbcdb2c02eaec98c08f3218d253af80bbdd5747314a2baa4d86699113d2f7a3cb9d6c07ea2832a60696225a6848994f1b7ecb523cf2a39513724f2e4
SSDEEP 384:IfzrwJqSs9w6MXaXi2uyGmoOqimo/GBm2/seonaNqK0+IxiZz/x6Rqnen2VLl:MzrwJq5DXYPmbqi/GBJZ7fOSB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

16276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\management.pdb

jvm

JVM_GetManagement JVM_ActiveProcessorCount JVM_GetAllThreads

psapi

GetProcessMemoryInfo

java

JNU_GetStaticFieldByName JNU_GetStringPlatformChars JNU_ReleaseStringPlatformChars JNU_ThrowInternalError JNU_ThrowIllegalArgumentException JNU_ThrowIOExceptionWithLastError JNU_ThrowNullPointerException JNU_ThrowOutOfMemoryError JNU_NewObjectByName JNU_ThrowByName JNU_ThrowIOException

advapi32

GetAce EqualSid GetSecurityDescriptorDacl GetSecurityDescriptorOwner GetFileSecurityA GetAclInformation

msvcr100

_malloc_crt _initterm _initterm_e _encoded_null _itoa __C_specific_handler __CppXcptFilter __crt_debugger_hook __clean_type_info_names_internal _unlock __dllonexit _lock _onexit sprintf clock calloc strrchr _snprintf strlen strncpy memset strchr malloc free _strdup _getpid _amsg_exit

kernel32

DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent QueryPerformanceCounter UnhandledExceptionFilter TerminateProcess Sleep DecodePointer EncodePointer GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary SetUnhandledExceptionFilter GetCurrentProcess GetSystemInfo GetProcAddress GetModuleFileNameA LeaveCriticalSection EnterCriticalSection GetCurrentThreadId InitializeCriticalSection LoadLibraryA GetProcessTimes GlobalMemoryStatusEx GetLastError GetVolumeInformationA

JNI_OnLoad Java_sun_management_ClassLoadingImpl_setVerboseClass Java_sun_management_DiagnosticCommandImpl_executeDiagnosticCommand Java_sun_management_DiagnosticCommandImpl_getDiagnosticCommandInfo Java_sun_management_DiagnosticCommandImpl_getDiagnosticCommands Java_sun_management_DiagnosticCommandImpl_setNotificationEnabled Java_sun_management_FileSystemImpl_init0 Java_sun_management_FileSystemImpl_isAccessUserOnly0 Java_sun_management_FileSystemImpl_isSecuritySupported0 Java_sun_management_Flag_getAllFlagNames Java_sun_management_Flag_getFlags Java_sun_management_Flag_getInternalFlagCount Java_sun_management_Flag_initialize Java_sun_management_Flag_setBooleanValue Java_sun_management_Flag_setLongValue Java_sun_management_Flag_setStringValue Java_sun_management_GarbageCollectorImpl_getCollectionCount Java_sun_management_GarbageCollectorImpl_getCollectionTime Java_sun_management_GarbageCollectorImpl_setNotificationEnabled Java_sun_management_GcInfoBuilder_fillGcAttributeInfo Java_sun_management_GcInfoBuilder_getLastGcInfo0 Java_sun_management_GcInfoBuilder_getNumGcExtAttributes Java_sun_management_HotSpotDiagnostic_dumpHeap0 Java_sun_management_HotspotThread_getInternalThreadCount Java_sun_management_HotspotThread_getInternalThreadTimes0 Java_sun_management_MemoryImpl_getMemoryManagers0 Java_sun_management_MemoryImpl_getMemoryPools0 Java_sun_management_MemoryImpl_getMemoryUsage0 Java_sun_management_MemoryImpl_setVerboseGC Java_sun_management_MemoryManagerImpl_getMemoryPools0 Java_sun_management_MemoryPoolImpl_getCollectionUsage0 Java_sun_management_MemoryPoolImpl_getMemoryManagers0 Java_sun_management_MemoryPoolImpl_getPeakUsage0 Java_sun_management_MemoryPoolImpl_getUsage0 Java_sun_management_MemoryPoolImpl_resetPeakUsage0 Java_sun_management_MemoryPoolImpl_setCollectionThreshold0 Java_sun_management_MemoryPoolImpl_setPoolCollectionSensor Java_sun_management_MemoryPoolImpl_setPoolUsageSensor Java_sun_management_MemoryPoolImpl_setUsageThreshold0 Java_sun_management_OperatingSystemImpl_getCommittedVirtualMemorySize0 Java_sun_management_OperatingSystemImpl_getFreePhysicalMemorySize Java_sun_management_OperatingSystemImpl_getFreeSwapSpaceSize Java_sun_management_OperatingSystemImpl_getProcessCpuLoad Java_sun_management_OperatingSystemImpl_getProcessCpuTime Java_sun_management_OperatingSystemImpl_getSystemCpuLoad Java_sun_management_OperatingSystemImpl_getTotalPhysicalMemorySize Java_sun_management_OperatingSystemImpl_getTotalSwapSpaceSize Java_sun_management_OperatingSystemImpl_initialize Java_sun_management_ThreadImpl_dumpThreads0 Java_sun_management_ThreadImpl_findDeadlockedThreads0 Java_sun_management_ThreadImpl_findMonitorDeadlockedThreads0 Java_sun_management_ThreadImpl_getThreadAllocatedMemory1 Java_sun_management_ThreadImpl_getThreadInfo1 Java_sun_management_ThreadImpl_getThreadTotalCpuTime0 Java_sun_management_ThreadImpl_getThreadTotalCpuTime1 Java_sun_management_ThreadImpl_getThreadUserCpuTime0 Java_sun_management_ThreadImpl_getThreadUserCpuTime1 Java_sun_management_ThreadImpl_getThreads Java_sun_management_ThreadImpl_resetContentionTimes0 Java_sun_management_ThreadImpl_resetPeakThreadCount0 Java_sun_management_ThreadImpl_setThreadAllocatedMemoryEnabled0 Java_sun_management_ThreadImpl_setThreadContentionMonitoringEnabled0 Java_sun_management_ThreadImpl_setThreadCpuTimeEnabled0 Java_sun_management_VMManagementImpl_getAvailableProcessors Java_sun_management_VMManagementImpl_getClassInitializationTime Java_sun_management_VMManagementImpl_getClassLoadingTime Java_sun_management_VMManagementImpl_getClassVerificationTime Java_sun_management_VMManagementImpl_getDaemonThreadCount Java_sun_management_VMManagementImpl_getInitializedClassCount Java_sun_management_VMManagementImpl_getLiveThreadCount Java_sun_management_VMManagementImpl_getLoadedClassSize Java_sun_management_VMManagementImpl_getMethodDataSize Java_sun_management_VMManagementImpl_getPeakThreadCount Java_sun_management_VMManagementImpl_getProcessId Java_sun_management_VMManagementImpl_getSafepointCount Java_sun_management_VMManagementImpl_getSafepointSyncTime Java_sun_management_VMManagementImpl_getStartupTime Java_sun_management_VMManagementImpl_getTotalApplicationNonStoppedTime Java_sun_management_VMManagementImpl_getTotalClassCount Java_sun_management_VMManagementImpl_getTotalCompileTime Java_sun_management_VMManagementImpl_getTotalSafepointTime Java_sun_management_VMManagementImpl_getTotalThreadCount Java_sun_management_VMManagementImpl_getUnloadedClassCount Java_sun_management_VMManagementImpl_getUnloadedClassSize Java_sun_management_VMManagementImpl_getUptime0 Java_sun_management_VMManagementImpl_getVerboseClass Java_sun_management_VMManagementImpl_getVerboseGC Java_sun_management_VMManagementImpl_getVersion0 Java_sun_management_VMManagementImpl_getVmArguments0 Java_sun_management_VMManagementImpl_initOptionalSupportFields Java_sun_management_VMManagementImpl_isThreadAllocatedMemoryEnabled Java_sun_management_VMManagementImpl_isThreadContentionMonitoringEnabled Java_sun_management_VMManagementImpl_isThreadCpuTimeEnabled

SpyLogger V1.1/res/bin/mlib_image.dll

IMPHASH 7e36fb3e5fcccea47b7bd3c285648a54
SHA256 773888c642b3638a17a90d702780fddb12a5c0ea4213425287a427fdc0b36228
MD5 992c1b2344861a342059473594a6227b
SHA1 ad1ba6f60108a2b740538d48c4628aec7a84d349
SHA512 372af14e4f0434f91642da3e005457df09a7dae50f1b5fe32fbeb349fc667a8a05832871b85d2899800e1b0fb2d3f76e31623d7cf877981733c6bc2a59a588b5
SSDEEP 12288:0He3NxR4bCpA3RD9gvlqNEyJIx/ZJt3AbZGd+69j/NNoxrbAlkx:TxR4bCpA3B9O4Ix/ZJt+Id+6x/NNoxrd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

577580

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\mlib_image.pdb

SpyLogger V1.1/res/bin/msvcr100.dll

IMPHASH 1208bcdc77cffee6a6813646321cfc79
SHA256 1d1a1ae540ba132f998d60d3622f0297b6e86ae399332c3b47462d7c0f560a36
MD5 df3ca8d16bded6a54977b30e66864d33
SHA1 b7b9349b33230c5b80886f5c1f0a42848661c883
SHA512 951b2f67c2f2ef1cfcd4b43bd3ee0e486cdba7d04b4ea7259df0e4b3112e360aefb8dcd058becccacd99aca7f56d4f9bd211075bd16b28c2661d562e50b423f0
SSDEEP 12288:3gzGPEett9Mw9HfBCddjMb2NQVmTW752fmyyKWeHQGokozS:QzJetPMw9HfBCrMb2Kc6ymyyKWewGzUS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

15:8f:4f:d5:2b:51:08:be:bb:a8:3f:39:3f:ef:69:d5:9d:e7:5a:55

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2011

Minor OS version

2

Major OS version

5

Entry point

136420

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

msvcr100.amd64.pdb

kernel32

EncodePointer DecodePointer RaiseException RtlPcToFileHeader GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetCurrentThreadId FlsSetValue FlsGetValue GetCommandLineW GetCommandLineA InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ExitThread CloseHandle GetLastError ResumeThread CreateThread FlsFree SetLastError GetCurrentThread FlsAlloc FindNextFileA FindFirstFileExA FindClose FindNextFileW FindFirstFileExW GetLogicalDrives GetDiskFreeSpaceA FileTimeToSystemTime FileTimeToLocalFileTime SetErrorMode Sleep Beep GetFileAttributesA SetFileAttributesA SetEnvironmentVariableA GetCurrentDirectoryA SetCurrentDirectoryA GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameA GetDriveTypeW GetCurrentProcessId CreateDirectoryA MoveFileA RemoveDirectoryA GetDriveTypeA DeleteFileA GetFileAttributesW SetEnvironmentVariableW SetFileAttributesW GetFullPathNameW CreateDirectoryW MoveFileW RemoveDirectoryW DeleteFileW GetExitCodeProcess WaitForSingleObject CreateProcessA LoadLibraryA FreeLibrary CreateProcessW ReadFile DuplicateHandle GetCurrentProcess GetSystemTimeAsFileTime GetTimeZoneInformation GetLocalTime WideCharToMultiByte SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetLocalTime TlsGetValue TlsSetValue InterlockedPopEntrySList InterlockedFlushSList QueryDepthSList InterlockedPushEntrySList CreateTimerQueue CreateTimerQueueTimer DeleteTimerQueueTimer SetEvent CreateEventW SwitchToThread SignalObjectAndWait TryEnterCriticalSection GetTickCount VirtualFree GetVersionExW SetThreadPriority VirtualAlloc GetLogicalProcessorInformation GetSystemInfo GetProcessAffinityMask VirtualProtect SetThreadAffinityMask InitializeSListHead ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects TlsAlloc TlsFree GetThreadPriority LoadLibraryW SleepEx OutputDebugStringW FreeLibraryAndExitThread GetModuleHandleA GetThreadTimes DebugBreak MultiByteToWideChar GetStringTypeW GetCPInfo GetACP GetOEMCP IsValidCodePage GetDateFormatA GetTimeFormatA GetDateFormatW GetTimeFormatW RtlLookupFunctionEntry RtlUnwindEx HeapAlloc HeapFree HeapSetInformation GetVersion HeapCreate HeapDestroy HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapCompact HeapWalk SetThreadStackGuarantee VirtualQuery SetHandleCount GetFileType GetStartupInfoW GetFileInformationByHandle PeekNamedPipe CreateFileA CreateFileW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers CreatePipe SetStdHandle ReadConsoleInputA SetConsoleMode PeekConsoleInputA GetNumberOfConsoleInputEvents ReadConsoleInputW WriteConsoleW ReadConsoleW SetEndOfFile GetProcessHeap LockFile UnlockFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext TerminateProcess SetConsoleCtrlHandler GetLocaleInfoW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter LCMapStringW CompareStringW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

$I10_OUTPUT ??0?$_SpinWait@$00@details@Concurrency@@QEAA@P6AXXZ@Z ??0?$_SpinWait@$0A@@details@Concurrency@@QEAA@P6AXXZ@Z ??0SchedulerPolicy@Concurrency@@QEAA@AEBV01@@Z ??0SchedulerPolicy@Concurrency@@QEAA@XZ ??0SchedulerPolicy@Concurrency@@QEAA@_KZZ ??0_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ ??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ ??0_ReaderWriterLock@details@Concurrency@@QEAA@XZ ??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ ??0_ReentrantLock@details@Concurrency@@QEAA@XZ ??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z ??0_SpinLock@details@Concurrency@@QEAA@AECJ@Z ??0_TaskCollection@details@Concurrency@@QEAA@XZ ??0_Timer@details@Concurrency@@IEAA@I_N@Z ??0__non_rtti_object@std@@QEAA@AEBV01@@Z ??0__non_rtti_object@std@@QEAA@PEBD@Z ??0bad_cast@std@@AEAA@PEBQEBD@Z ??0bad_cast@std@@QEAA@AEBV01@@Z ??0bad_cast@std@@QEAA@PEBD@Z ??0bad_target@Concurrency@@QEAA@PEBD@Z ??0bad_target@Concurrency@@QEAA@XZ ??0bad_typeid@std@@QEAA@AEBV01@@Z ??0bad_typeid@std@@QEAA@PEBD@Z ??0context_self_unblock@Concurrency@@QEAA@PEBD@Z ??0context_self_unblock@Concurrency@@QEAA@XZ ??0context_unblock_unbalanced@Concurrency@@QEAA@PEBD@Z ??0context_unblock_unbalanced@Concurrency@@QEAA@XZ ??0critical_section@Concurrency@@QEAA@XZ ??0default_scheduler_exists@Concurrency@@QEAA@PEBD@Z ??0default_scheduler_exists@Concurrency@@QEAA@XZ ??0event@Concurrency@@QEAA@XZ ??0exception@std@@QEAA@AEBQEBD@Z ??0exception@std@@QEAA@AEBQEBDH@Z ??0exception@std@@QEAA@AEBV01@@Z ??0exception@std@@QEAA@XZ ??0improper_lock@Concurrency@@QEAA@PEBD@Z ??0improper_lock@Concurrency@@QEAA@XZ ??0improper_scheduler_attach@Concurrency@@QEAA@PEBD@Z ??0improper_scheduler_attach@Concurrency@@QEAA@XZ ??0improper_scheduler_detach@Concurrency@@QEAA@PEBD@Z ??0improper_scheduler_detach@Concurrency@@QEAA@XZ ??0improper_scheduler_reference@Concurrency@@QEAA@PEBD@Z ??0improper_scheduler_reference@Concurrency@@QEAA@XZ ??0invalid_link_target@Concurrency@@QEAA@PEBD@Z ??0invalid_link_target@Concurrency@@QEAA@XZ ??0invalid_multiple_scheduling@Concurrency@@QEAA@PEBD@Z ??0invalid_multiple_scheduling@Concurrency@@QEAA@XZ ??0invalid_operation@Concurrency@@QEAA@PEBD@Z ??0invalid_operation@Concurrency@@QEAA@XZ ??0invalid_oversubscribe_operation@Concurrency@@QEAA@PEBD@Z ??0invalid_oversubscribe_operation@Concurrency@@QEAA@XZ ??0invalid_scheduler_policy_key@Concurrency@@QEAA@PEBD@Z ??0invalid_scheduler_policy_key@Concurrency@@QEAA@XZ ??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@PEBD@Z ??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@XZ ??0invalid_scheduler_policy_value@Concurrency@@QEAA@PEBD@Z ??0invalid_scheduler_policy_value@Concurrency@@QEAA@XZ ??0message_not_found@Concurrency@@QEAA@PEBD@Z ??0message_not_found@Concurrency@@QEAA@XZ ??0missing_wait@Concurrency@@QEAA@PEBD@Z ??0missing_wait@Concurrency@@QEAA@XZ ??0nested_scheduler_missing_detach@Concurrency@@QEAA@PEBD@Z ??0nested_scheduler_missing_detach@Concurrency@@QEAA@XZ ??0operation_timed_out@Concurrency@@QEAA@PEBD@Z ??0operation_timed_out@Concurrency@@QEAA@XZ ??0reader_writer_lock@Concurrency@@QEAA@XZ ??0scheduler_not_attached@Concurrency@@QEAA@PEBD@Z ??0scheduler_not_attached@Concurrency@@QEAA@XZ ??0scheduler_resource_allocation_error@Concurrency@@QEAA@J@Z ??0scheduler_resource_allocation_error@Concurrency@@QEAA@PEBDJ@Z ??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z ??0scoped_lock@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z ??0scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z ??0task_canceled@details@Concurrency@@QEAA@PEBD@Z ??0task_canceled@details@Concurrency@@QEAA@XZ ??0unsupported_os@Concurrency@@QEAA@PEBD@Z ??0unsupported_os@Concurrency@@QEAA@XZ ??1SchedulerPolicy@Concurrency@@QEAA@XZ ??1_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ ??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ ??1_SpinLock@details@Concurrency@@QEAA@XZ ??1_TaskCollection@details@Concurrency@@QEAA@XZ ??1_Timer@details@Concurrency@@IEAA@XZ ??1__non_rtti_object@std@@UEAA@XZ ??1bad_cast@std@@UEAA@XZ ??1bad_typeid@std@@UEAA@XZ ??1critical_section@Concurrency@@QEAA@XZ ??1event@Concurrency@@QEAA@XZ ??1exception@std@@UEAA@XZ ??1reader_writer_lock@Concurrency@@QEAA@XZ ??1scoped_lock@critical_section@Concurrency@@QEAA@XZ ??1scoped_lock@reader_writer_lock@Concurrency@@QEAA@XZ ??1scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@XZ ??1type_info@@UEAA@XZ ??2@YAPEAX_K@Z ??2@YAPEAX_KHPEBDH@Z ??3@YAXPEAX@Z ??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@AEBV012@@Z ??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@AEBV012@@Z ??4SchedulerPolicy@Concurrency@@QEAAAEAV01@AEBV01@@Z ??4__non_rtti_object@std@@QEAAAEAV01@AEBV01@@Z ??4bad_cast@std@@QEAAAEAV01@AEBV01@@Z ??4bad_typeid@std@@QEAAAEAV01@AEBV01@@Z ??4exception@std@@QEAAAEAV01@AEBV01@@Z ??8type_info@@QEBA_NAEBV0@@Z ??9type_info@@QEBA_NAEBV0@@Z ??_7__non_rtti_object@std@@6B@ ??_7bad_cast@std@@6B@ ??_7bad_typeid@std@@6B@ ??_7exception@@6B@ ??_7exception@std@@6B@ ??_F?$_SpinWait@$00@details@Concurrency@@QEAAXXZ ??_F?$_SpinWait@$0A@@details@Concurrency@@QEAAXXZ ??_Fbad_cast@std@@QEAAXXZ ??_Fbad_typeid@std@@QEAAXXZ ??_U@YAPEAX_K@Z ??_U@YAPEAX_KHPEBDH@Z ??_V@YAXPEAX@Z ?Alloc@Concurrency@@YAPEAX_K@Z ?Block@Context@Concurrency@@SAXXZ ?Create@CurrentScheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z ?Create@Scheduler@Concurrency@@SAPEAV12@AEBVSchedulerPolicy@2@@Z ?CreateResourceManager@Concurrency@@YAPEAUIResourceManager@1@XZ ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@XZ ?CurrentContext@Context@Concurrency@@SAPEAV12@XZ ?Detach@CurrentScheduler@Concurrency@@SAXXZ ?DisableTracing@Concurrency@@YAJXZ ?EnableTracing@Concurrency@@YAJXZ ?Free@Concurrency@@YAXPEAX@Z ?Get@CurrentScheduler@Concurrency@@SAPEAVScheduler@2@XZ ?GetExecutionContextId@Concurrency@@YAIXZ ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ ?GetPolicyValue@SchedulerPolicy@Concurrency@@QEBAIW4PolicyElementKey@2@@Z ?GetProcessorCount@Concurrency@@YAIXZ ?GetProcessorNodeCount@Concurrency@@YAIXZ ?GetSchedulerId@Concurrency@@YAIXZ ?GetSharedTimerQueue@details@Concurrency@@YAPEAXXZ ?Id@Context@Concurrency@@SAIXZ ?Id@CurrentScheduler@Concurrency@@SAIXZ ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ ?Log2@details@Concurrency@@YAK_K@Z ?Oversubscribe@Context@Concurrency@@SAX_N@Z ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPEAX@Z ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ ?ScheduleGroupId@Context@Concurrency@@SAIXZ ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0@Z ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QEAAXII@Z ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z ?SetPolicyValue@SchedulerPolicy@Concurrency@@QEAAIW4PolicyElementKey@2@I@Z ?VirtualProcessorId@Context@Concurrency@@SAIXZ ?Yield@Context@Concurrency@@SAXXZ ?_Abort@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ ?_Acquire@_ReentrantLock@details@Concurrency@@QEAAXXZ ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QEAAXXZ ?_Cancel@_TaskCollection@details@Concurrency@@QEAAXXZ ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IEAAXXZ ?_ConcRT_Assert@details@Concurrency@@YAXPEBD0H@Z ?_ConcRT_CoreAssert@details@Concurrency@@YAXPEBD0H@Z ?_ConcRT_DumpMessage@details@Concurrency@@YAXPEB_WZZ ?_ConcRT_Trace@details@Concurrency@@YAXHPEB_WZZ ?_Copy_str@exception@std@@AEAAXPEBD@Z ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QEAA_NXZ ?_IsCanceling@_TaskCollection@details@Concurrency@@QEAA_NXZ ?_Name_base@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z ?_Name_base_internal@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IEAAKXZ ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IEAAKXZ ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ ?_Release@_NonReentrantPPLLock@details@Concurrency@@QEAAXXZ ?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ ?_Release@_ReentrantLock@details@Concurrency@@QEAAXXZ ?_Release@_ReentrantPPLLock@details@Concurrency@@QEAAXXZ ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ ?_Reset@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z ?_RunAndWait@_TaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QEAAXI@Z ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QEAAXI@Z ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IEAA_NXZ ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IEAA_NXZ ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QEAA_NXZ ?_SpinYield@Context@Concurrency@@SAXXZ ?_Start@_Timer@details@Concurrency@@IEAAXXZ ?_Stop@_Timer@details@Concurrency@@IEAAXXZ ?_Tidy@exception@std@@AEAAXXZ ?_Trace_ppl_function@Concurrency@@YAXAEBU_GUID@@EW4ConcRT_EventType@1@@Z ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QEAA_NXZ ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QEAA_NXZ ?_TryAcquire@_ReentrantLock@details@Concurrency@@QEAA_NXZ ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAA_NXZ ?_Type_info_dtor@type_info@@CAXPEAV1@@Z ?_Type_info_dtor_internal@type_info@@CAXPEAV1@@Z ?_UnderlyingYield@details@Concurrency@@YAXXZ ?_ValidateExecute@@YAHP6A_JXZ@Z ?_ValidateRead@@YAHPEBXI@Z ?_ValidateWrite@@YAHPEAXI@Z ?_Value@_SpinCount@details@Concurrency@@SAIXZ ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCompare@@YA_NPEBX0@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?_inconsistency@@YAXXZ ?_invalid_parameter@@YAXPEBG00I_K@Z ?_is_exception_typeof@@YAHAEBVtype_info@@PEAU_EXCEPTION_POINTERS@@@Z ?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z ?_open@@YAHPEBDHH@Z ?_query_new_handler@@YAP6AH_K@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AH_K@ZH@Z ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZH@Z ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?_sopen@@YAHPEBDHHH@Z ?_type_info_dtor_internal_method@type_info@@QEAAXXZ ?_wopen@@YAHPEB_WHH@Z ?_wsopen@@YAHPEB_WHHH@Z ?before@type_info@@QEBAHAEBV1@@Z ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QEBAJXZ ?lock@critical_section@Concurrency@@QEAAXXZ ?lock@reader_writer_lock@Concurrency@@QEAAXXZ ?lock_read@reader_writer_lock@Concurrency@@QEAAXXZ ?name@type_info@@QEBAPEBDPEAU__type_info_node@@@Z ?native_handle@critical_section@Concurrency@@QEAAAEAV12@XZ ?raw_name@type_info@@QEBAPEBDXZ ?reset@event@Concurrency@@QEAAXXZ ?set@event@Concurrency@@QEAAXXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZH@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZH@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?terminate@@YAXXZ ?try_lock@critical_section@Concurrency@@QEAA_NXZ ?try_lock@reader_writer_lock@Concurrency@@QEAA_NXZ ?try_lock_read@reader_writer_lock@Concurrency@@QEAA_NXZ ?unexpected@@YAXXZ ?unlock@critical_section@Concurrency@@QEAAXXZ ?unlock@reader_writer_lock@Concurrency@@QEAAXXZ ?wait@Concurrency@@YAXI@Z ?wait@event@Concurrency@@QEAA_KI@Z ?wait_for_multiple@event@Concurrency@@SA_KPEAPEAV12@_K_NI@Z ?what@exception@std@@UEBAPEBDXZ _CRT_RTC_INIT _CRT_RTC_INITW _CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _GetImageBase _GetThrowImageBase _Getdays _Getmonths _Gettnames _HUGE _IsExceptionObjectToBeDestroyed _SetImageBase _SetThrowImageBase _Strftime _XcptFilter __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __CppXcptFilter __CxxCallUnwindDelDtor __CxxCallUnwindDtor __CxxCallUnwindStdDelDtor __CxxCallUnwindVecDtor __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __STRINGTOLD_L __TypeMatch ___lc_codepage_func ___lc_collate_cp_func ___lc_handle_func ___mb_cur_max_func ___mb_cur_max_l_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __clean_type_info_names_internal __create_locale __crtCompareStringA __crtCompareStringW __crtLCMapStringA __crtLCMapStringW __crt_debugger_hook __daylight __dllonexit __doserrno __dstbias __fls_getvalue __fls_setvalue __fpecode __free_locale __get_current_locale __get_flsindex __get_tlsindex __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __iswcsym __iswcsymf __lconv __lconv_init __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__commode __p__daylight __p__dstbias __p__environ __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __report_gsfailure __set_app_type __set_flsgetvalue __setlc_active __setusermatherr __strncnt __swprintf_l __sys_errlist __sys_nerr __threadhandle __threadid __timezone __toascii __tzname __unDName __unDNameEx __unDNameHelper __uncaught_exception __unguarded_readlc_active __vswprintf_l __wargv __wcserror __wcserror_s __wcsncnt __wgetmainargs __winitenv _abs64 _access _access_s _acmdln _aligned_free _aligned_malloc _aligned_msize _aligned_offset_malloc _aligned_offset_realloc _aligned_offset_recalloc _aligned_realloc _aligned_recalloc _amsg_exit _assert _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _beep _beginthread _beginthreadex _byteswap_uint64 _byteswap_ulong _byteswap_ushort _c_exit _cabs _callnewh _calloc_crt _cexit _cgets _cgets_s _cgetws _cgetws_s _chdir _chdrive _chgsign _chgsignf _chmod _chsize _chsize_s _clearfp _close _commit _commode _configthreadlocale _control87 _controlfp _controlfp_s _copysign _copysignf _cprintf _cprintf_l _cprintf_p _cprintf_p_l _cprintf_s _cprintf_s_l _cputs _cputws _creat _create_locale _cscanf _cscanf_l _cscanf_s _cscanf_s_l _ctime32 _ctime32_s _ctime64 _ctime64_s _cwait _cwprintf _cwprintf_l _cwprintf_p _cwprintf_p_l _cwprintf_s _cwprintf_s_l _cwscanf _cwscanf_l _cwscanf_s _cwscanf_s_l _daylight _difftime32 _difftime64 _dosmaperr _dstbias _dup _dup2 _dupenv_s _ecvt _ecvt_s _encoded_null _endthread _endthreadex _environ _eof _errno _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fclose_nolock _fcloseall _fcvt _fcvt_s _fdopen _fflush_nolock _fgetchar _fgetwc_nolock _fgetwchar _filbuf _filelength _filelengthi64 _fileno _findclose _findfirst32 _findfirst32i64 _findfirst64 _findfirst64i32 _findnext32 _findnext32i64 _findnext64 _findnext64i32 _finite _finitef _flsbuf _flushall _fmode _fpclass _fpclassf _fpieee_flt _fpreset _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fputchar _fputwc_nolock _fputwchar _fread_nolock _fread_nolock_s _free_locale _freea _freea_s _freefls _fscanf_l _fscanf_s_l _fseek_nolock _fseeki64 _fseeki64_nolock _fsopen _fstat32 _fstat32i64 _fstat64 _fstat64i32 _ftell_nolock _ftelli64 _ftelli64_nolock _ftime32 _ftime32_s _ftime64 _ftime64_s _fullpath _futime32 _futime64 _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwrite_nolock _fwscanf_l _fwscanf_s_l _gcvt _gcvt_s _get_current_locale _get_daylight _get_doserrno _get_dstbias _get_errno _get_fmode _get_heap_handle _get_invalid_parameter_handler _get_osfhandle _get_output_format _get_pgmptr _get_printf_count_output _get_purecall_handler _get_terminate _get_timezone _get_tzname _get_unexpected _get_wpgmptr _getc_nolock _getch _getch_nolock _getche _getche_nolock _getcwd _getdcwd _getdcwd_nolock _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getptd _getsystime _getw _getwch _getwch_nolock _getwche _getwche_nolock _getws _getws_s _gmtime32 _gmtime32_s _gmtime64 _gmtime64_s _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _hypotf _i64toa _i64toa_s _i64tow _i64tow_s _initptd _initterm _initterm_e _invalid_parameter _invalid_parameter_noinfo _invalid_parameter_noinfo_noreturn _invoke_watson _iob _isalnum_l _isalpha_l _isatty _iscntrl_l _isctype _isctype_l _isdigit_l _isgraph_l _isleadbyte_l _islower_l _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _isnan _isnanf _isprint_l _ispunct_l _isspace_l _isupper_l _iswalnum_l _iswalpha_l _iswcntrl_l _iswcsym_l _iswcsymf_l _iswctype_l _iswdigit_l _iswgraph_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _isxdigit_l _itoa _itoa_s _itow _itow_s _j0 _j1 _jn _kbhit _lfind _lfind_s _loaddll _local_unwind _localtime32 _localtime32_s _localtime64 _localtime64_s _lock _lock_file _locking _logb _logbf _lrotl _lrotr _lsearch _lsearch_s _lseek _lseeki64 _ltoa _ltoa_s _ltow _ltow_s _makepath _makepath_s _malloc_crt _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mbctype _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l _memccpy _memicmp _memicmp_l _mkdir _mkgmtime32 _mkgmtime64 _mktemp _mktemp_s _mktime32 _mktime64 _msize _nextafter _nextafterf _onexit _open _open_osfhandle _pclose _pctype _pgmptr _pipe _popen _printf_l _printf_p _printf_p_l _printf_s_l _purecall _putch _putch_nolock _putenv _putenv_s _putw _putwch _putwch_nolock _putws _pwctype _read _realloc_crt _recalloc _recalloc_crt _resetstkoflw _rmdir _rmtmp _rotl _rotl64 _rotr _rotr64 _scalb _scalbf _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _searchenv _searchenv_s _set_abort_behavior _set_controlfp _set_doserrno _set_errno _set_error_mode _set_fmode _set_invalid_parameter_handler _set_malloc_crt_max_wait _set_output_format _set_printf_count_output _set_purecall_handler _seterrormode _setjmp _setjmpex _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sopen _sopen_s _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _splitpath_s _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _stat32 _stat32i64 _stat64 _stat64i32 _statusfp _strcoll_l _strdate _strdate_s _strdup _strerror _strerror_s _strftime_l _stricmp _stricmp_l _stricoll _stricoll_l _strlwr _strlwr_l _strlwr_s _strlwr_s_l _strncoll _strncoll_l _strnicmp _strnicmp_l _strnicoll _strnicoll_l _strnset _strnset_s _strrev _strset _strset_s _strtime _strtime_s _strtod_l _strtoi64 _strtoi64_l _strtol_l _strtoui64 _strtoui64_l _strtoul_l _strupr _strupr_l _strupr_s _strupr_s_l _strxfrm_l _swab _swprintf _swprintf_c _swprintf_c_l _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _sys_errlist _sys_nerr _tell _telli64 _tempnam _time32 _time64 _timezone _tolower _tolower_l _toupper _toupper_l _towlower_l _towupper_l _tzname _tzset _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _umask _umask_s _ungetc_nolock _ungetch _ungetch_nolock _ungetwc_nolock _ungetwch _ungetwch_nolock _unlink _unloaddll _unlock _unlock_file _utime32 _utime64 _vcprintf _vcprintf_l _vcprintf_p _vcprintf_p_l _vcprintf_s _vcprintf_s_l _vcwprintf _vcwprintf_l _vcwprintf_p _vcwprintf_p_l _vcwprintf_s _vcwprintf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _waccess _waccess_s _wasctime _wasctime_s _wassert _wchdir _wchmod _wcmdln _wcreat _wcscoll_l _wcsdup _wcserror _wcserror_s _wcsftime_l _wcsicmp _wcsicmp_l _wcsicoll _wcsicoll_l _wcslwr _wcslwr_l _wcslwr_s _wcslwr_s_l _wcsncoll _wcsncoll_l _wcsnicmp _wcsnicmp_l _wcsnicoll _wcsnicoll_l _wcsnset _wcsnset_s _wcsrev _wcsset _wcsset_s _wcstod_l _wcstoi64 _wcstoi64_l _wcstol_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcsupr _wcsupr_l _wcsupr_s _wcsupr_s_l _wcsxfrm_l _wctime32 _wctime32_s _wctime64 _wctime64_s _wctomb_l _wctomb_s_l _wctype _wdupenv_s _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst32 _wfindfirst32i64 _wfindfirst64 _wfindfirst64i32 _wfindnext32 _wfindnext32i64 _wfindnext64 _wfindnext64i32 _wfopen _wfopen_s _wfreopen _wfreopen_s _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetdcwd_nolock _wgetenv _wgetenv_s _wmakepath _wmakepath_s _wmkdir _wmktemp _wmktemp_s _wopen _wperror _wpgmptr _wpopen _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wputenv _wputenv_s _wremove _wrename _write _wrmdir _wscanf_l _wscanf_s_l _wsearchenv _wsearchenv_s _wsetlocale _wsopen _wsopen_s _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wsplitpath_s _wstat32 _wstat32i64 _wstat64 _wstat64i32 _wstrdate _wstrdate_s _wstrtime _wstrtime_s _wsystem _wtempnam _wtmpnam _wtmpnam_s _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wunlink _wutime32 _wutime64 _y0 _y1 _yn abort abs acos acosf asctime asctime_s asin asinf atan atan2 atan2f atanf atexit atof atoi atol bsearch bsearch_s btowc calloc ceil ceilf clearerr clearerr_s clock cos cosf cosh coshf div exit exp expf fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor floorf fmod fmodf fopen fopen_s fprintf fprintf_s fputc fputs fputwc fputws fread fread_s free freopen freopen_s frexp fscanf fscanf_s fseek fsetpos ftell fwprintf fwprintf_s fwrite fwscanf fwscanf_s getc getchar getenv getenv_s gets gets_s getwc getwchar is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv llabs lldiv localeconv log log10 log10f logf longjmp malloc mblen mbrlen mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset modf modff perror pow powf printf printf_s putc putchar puts putwc putwchar qsort qsort_s raise rand rand_s realloc remove rename rewind scanf scanf_s setbuf setjmp setlocale setvbuf signal sin sinf sinh sinhf sprintf sprintf_s sqrt sqrtf srand sscanf sscanf_s strcat strcat_s strchr strcmp strcoll strcpy strcpy_s strcspn strerror strerror_s strftime strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strrchr strspn strstr strtod strtok strtok_s strtol strtoul strxfrm swprintf_s swscanf swscanf_s system tan tanf tanh tanhf tmpfile tmpfile_s tmpnam tmpnam_s tolower toupper towlower towupper ungetc ungetwc vfprintf vfprintf_s vfwprintf vfwprintf_s vprintf vprintf_s vsprintf vsprintf_s vswprintf_s vwprintf vwprintf_s wcrtomb wcrtomb_s wcscat wcscat_s wcschr wcscmp wcscoll wcscpy wcscpy_s wcscspn wcsftime wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcspbrk wcsrchr wcsrtombs wcsrtombs_s wcsspn wcsstr wcstod wcstok wcstok_s wcstol wcstombs wcstombs_s wcstoul wcsxfrm wctob wctomb wctomb_s wmemcpy_s wmemmove_s wprintf wprintf_s wscanf wscanf_s

Name

.text

Size

574KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_CONST

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

text

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SpyLogger V1.1/res/bin/net.dll

IMPHASH c5e19d101d811ae03f145975c5eb7e16
SHA256 c492d09758b2536299d1f0dba9e54ce0f75b10d92afd8fe1bc3277a1cbcd8182
MD5 5b91495d20bfe8d52007c20f844125f5
SHA1 ed1e1cd3c9b8fcf2b84d9a0b1126039bec65e555
SHA512 e515beb8c4d26a6550a6c2b5256224f24bbd78132918062f7391ea294a3c9231c1ffdb7a5ce66eef558aa1aa8f4f771f776ef5c01fe0fd005c0fd5f46f061a6c
SSDEEP 1536:rzOPmJKE9NI38qqqt6KlywoZ1vD3RLi/v7o9ao7iC5H7LkH5Lu:/Oco3tqqc61O1vDc37i/9fkZS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

62384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\net.pdb

ws2_32

htons WSAGetLastError recvfrom WSAIoctl closesocket setsockopt socket WSASetLastError connect ntohs getsockname sendto ioctlsocket __WSAFDIsSet WSASendDisconnect WSAStartup WSACleanup getprotobyname recv getnameinfo getaddrinfo freeaddrinfo bind WSACreateEvent WSAEventSelect select getsockopt WSACloseEvent htonl gethostbyaddr ntohl gethostbyname gethostname send accept listen shutdown

jvm

jio_snprintf JVM_InitializeSocketLibrary JVM_CurrentTimeMillis

java

JNU_NewStringPlatform JNU_ThrowByNameWithMessageAndLastError getErrorString JNU_ThrowNullPointerException JNU_ThrowOutOfMemoryError JNU_ThrowByName JNU_ThrowByNameWithLastError JNU_ReleaseStringPlatformChars JNU_GetStringPlatformChars

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

msvcr100

__clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter __C_specific_handler _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt strcat wcscpy _snprintf_s __dllonexit _lock _onexit _unlock fprintf __iob_func sscanf strchr strstr sprintf strcmp strncmp strtok strlen memset free malloc strcpy isspace memcpy _errno realloc wcslen strncpy calloc strncpy_s

kernel32

GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess DecodePointer EncodePointer RaiseException LoadLibraryA GetCurrentThreadId FreeLibrary GetProcAddress LocalAlloc InitializeCriticalSection EnterCriticalSection GetVersionExA LeaveCriticalSection GetOverlappedResult MultiByteToWideChar FormatMessageA LocalFree VerSetConditionMask VerifyVersionInfoW Sleep SetHandleInformation GetCurrentProcessId GetSystemTimeAsFileTime GetLastError

JNI_OnLoad Java_java_net_DatagramPacket_init Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable Java_java_net_DualStackPlainDatagramSocketImpl_initIDs Java_java_net_DualStackPlainDatagramSocketImpl_socketBind Java_java_net_DualStackPlainDatagramSocketImpl_socketClose Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData Java_java_net_DualStackPlainDatagramSocketImpl_socketSend Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption Java_java_net_DualStackPlainSocketImpl_accept0 Java_java_net_DualStackPlainSocketImpl_available0 Java_java_net_DualStackPlainSocketImpl_bind0 Java_java_net_DualStackPlainSocketImpl_close0 Java_java_net_DualStackPlainSocketImpl_configureBlocking Java_java_net_DualStackPlainSocketImpl_connect0 Java_java_net_DualStackPlainSocketImpl_getIntOption Java_java_net_DualStackPlainSocketImpl_initIDs Java_java_net_DualStackPlainSocketImpl_listen0 Java_java_net_DualStackPlainSocketImpl_localAddress Java_java_net_DualStackPlainSocketImpl_localPort0 Java_java_net_DualStackPlainSocketImpl_sendOOB Java_java_net_DualStackPlainSocketImpl_setIntOption Java_java_net_DualStackPlainSocketImpl_shutdown0 Java_java_net_DualStackPlainSocketImpl_socket0 Java_java_net_DualStackPlainSocketImpl_waitForConnect Java_java_net_DualStackPlainSocketImpl_waitForNewConnection Java_java_net_Inet4AddressImpl_getHostByAddr Java_java_net_Inet4AddressImpl_getLocalHostName Java_java_net_Inet4AddressImpl_isReachable0 Java_java_net_Inet4AddressImpl_lookupAllHostAddr Java_java_net_Inet4Address_init Java_java_net_Inet6AddressImpl_getHostByAddr Java_java_net_Inet6AddressImpl_getLocalHostName Java_java_net_Inet6AddressImpl_isReachable0 Java_java_net_Inet6AddressImpl_lookupAllHostAddr Java_java_net_Inet6Address_init Java_java_net_InetAddressImplFactory_isIPv6Supported Java_java_net_InetAddress_init Java_java_net_NetworkInterface_getAll Java_java_net_NetworkInterface_getAll_XP Java_java_net_NetworkInterface_getByIndex0 Java_java_net_NetworkInterface_getByIndex0_XP Java_java_net_NetworkInterface_getByInetAddress0 Java_java_net_NetworkInterface_getByInetAddress0_XP Java_java_net_NetworkInterface_getByName0 Java_java_net_NetworkInterface_getByName0_XP Java_java_net_NetworkInterface_getMTU0 Java_java_net_NetworkInterface_getMTU0_XP Java_java_net_NetworkInterface_getMacAddr0 Java_java_net_NetworkInterface_getMacAddr0_XP Java_java_net_NetworkInterface_init Java_java_net_NetworkInterface_isLoopback0 Java_java_net_NetworkInterface_isLoopback0_XP Java_java_net_NetworkInterface_isP2P0 Java_java_net_NetworkInterface_isP2P0_XP Java_java_net_NetworkInterface_isUp0 Java_java_net_NetworkInterface_isUp0_XP Java_java_net_NetworkInterface_supportsMulticast0 Java_java_net_NetworkInterface_supportsMulticast0_XP Java_java_net_SocketInputStream_init Java_java_net_SocketInputStream_socketRead0 Java_java_net_SocketOutputStream_init Java_java_net_SocketOutputStream_socketWrite0 Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0 Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0 Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0 Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive Java_java_net_TwoStacksPlainDatagramSocketImpl_init Java_java_net_TwoStacksPlainDatagramSocketImpl_join Java_java_net_TwoStacksPlainDatagramSocketImpl_leave Java_java_net_TwoStacksPlainDatagramSocketImpl_peek Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0 Java_java_net_TwoStacksPlainDatagramSocketImpl_send Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption Java_java_net_TwoStacksPlainSocketImpl_initProto Java_java_net_TwoStacksPlainSocketImpl_socketAccept Java_java_net_TwoStacksPlainSocketImpl_socketAvailable Java_java_net_TwoStacksPlainSocketImpl_socketBind Java_java_net_TwoStacksPlainSocketImpl_socketClose0 Java_java_net_TwoStacksPlainSocketImpl_socketConnect Java_java_net_TwoStacksPlainSocketImpl_socketCreate Java_java_net_TwoStacksPlainSocketImpl_socketGetOption Java_java_net_TwoStacksPlainSocketImpl_socketListen Java_java_net_TwoStacksPlainSocketImpl_socketNativeSetOption Java_java_net_TwoStacksPlainSocketImpl_socketSendUrgentData Java_java_net_TwoStacksPlainSocketImpl_socketShutdown Java_sun_net_ExtendedOptionsImpl_flowSupported Java_sun_net_ExtendedOptionsImpl_getFlowOption Java_sun_net_ExtendedOptionsImpl_init Java_sun_net_ExtendedOptionsImpl_setFlowOption Java_sun_net_PortConfig_getLower0 Java_sun_net_PortConfig_getUpper0 Java_sun_net_dns_ResolverConfigurationImpl_init0 Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0 Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0 Java_sun_net_spi_DefaultProxySelector_getSystemProxy Java_sun_net_spi_DefaultProxySelector_init Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst NET_Bind NET_BindV6 NET_EnableFastTcpLoopback NET_GetPortFromSockaddr NET_GetSockOpt NET_InetAddressToSockaddr NET_MapSocketOption NET_MapSocketOptionV6 NET_SetSockOpt NET_SockaddrEqualsInetAddress NET_SockaddrToInetAddress NET_SocketClose NET_ThrowNew NET_Timeout NET_Timeout2 NET_WinBind initInetAddressIDs ipv6_available

SpyLogger V1.1/res/bin/nio.dll

IMPHASH b036394e86781c7f9e783c7bf2c718b4
SHA256 926190778783e70503edd22fb18529852305aa244831e5aaedf30b4ece892adf
MD5 c6b74151d75a9e9683c2f8b8d4e408e0
SHA1 58c32c77f31a77bac43d2b236002101cdc04c3a1
SHA512 fa18e60482d3b037b0cef7157467a50c2d6d36e45918b708beca2b55af062a87480612e45ded8c3cfeb130bc61aaa9237d0e589a04aaa7f269c97e51dd78fa3b
SSDEEP 768:rspDWmSkJjJbFToFQW3KuHV+IbJfFP+Pv+aie/gxZqOsPGnCl8WaQNWm3xg:d36uHgkJaieITqPl8WHJ3u
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

30760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\nio.pdb

ws2_32

WSAGetLastError recvfrom WSAIoctl connect sendto WSARecv WSASend ioctlsocket WSAEventSelect setsockopt socket listen getsockopt getsockname getpeername htonl ntohl shutdown __WSAFDIsSet recv closesocket WSASendDisconnect send accept select

java

JNU_ThrowByName JNU_ThrowIOExceptionWithLastError Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed JNU_NewObjectByName JNU_ThrowInternalError JNU_ThrowOutOfMemoryError

net

NET_GetPortFromSockaddr NET_SockaddrEqualsInetAddress NET_SockaddrToInetAddress initInetAddressIDs ipv6_available NET_EnableFastTcpLoopback NET_ThrowNew NET_WinBind NET_GetSockOpt NET_SetSockOpt NET_InetAddressToSockaddr

advapi32

LookupAccountNameW LookupPrivilegeValueW MapGenericMask AccessCheck AdjustTokenPrivileges GetTokenInformation SetThreadToken DuplicateTokenEx OpenThreadToken OpenProcessToken ConvertStringSidToSidW ConvertSidToStringSidW GetLengthSid LookupAccountSidW AddAccessDeniedAceEx AddAccessAllowedAceEx GetAce GetAclInformation SetSecurityDescriptorDacl GetSecurityDescriptorDacl SetSecurityDescriptorOwner GetSecurityDescriptorOwner GetFileSecurityW SetFileSecurityW InitializeAcl InitializeSecurityDescriptor RegOpenKeyExW RegQueryValueExW RegCloseKey

msvcr100

_lock __dllonexit _unlock __clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter __C_specific_handler _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt _errno wcslen _get_osfhandle malloc free memset _onexit

mswsock

TransmitFile

kernel32

GetFileAttributesExW SetFileAttributesW GetFileAttributesW GetLogicalDrives MoveFileExW CopyFileExW FindClose SetFileTime FindFirstFileW RemoveDirectoryW CreateDirectoryW DeleteFileW DeviceIoControl LocalFree CreateEventW GetVolumeInformationW GetDriveTypeW GetDiskFreeSpaceExW GetVolumePathNameW GetCurrentThread LocalAlloc CreateHardLinkW GetFullPathNameW CancelIo GetOverlappedResult ReadDirectoryChangesW BackupRead BackupSeek EncodePointer DecodePointer TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DisableThreadLibraryCalls QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FindNextFileW Sleep SetHandleInformation FlushViewOfFile FormatMessageW PostQueuedCompletionStatus GetQueuedCompletionStatus CreateIoCompletionPort GetVersionExA GetFileInformationByHandle GetCurrentProcess DuplicateHandle UnlockFileEx LockFileEx GetFileSize SetEndOfFile FlushFileBuffers WriteFile ReadFile SetFilePointer UnmapViewOfFile CreateFileW GetModuleHandleExW GetSystemInfo CloseHandle GetLastError MapViewOfFile CreateFileMappingA GetProcAddress

Java_java_nio_MappedByteBuffer_force0 Java_java_nio_MappedByteBuffer_isLoaded0 Java_java_nio_MappedByteBuffer_load0 Java_sun_nio_ch_DatagramChannelImpl_disconnect0 Java_sun_nio_ch_DatagramChannelImpl_initIDs Java_sun_nio_ch_DatagramChannelImpl_receive0 Java_sun_nio_ch_DatagramChannelImpl_send0 Java_sun_nio_ch_DatagramDispatcher_read0 Java_sun_nio_ch_DatagramDispatcher_readv0 Java_sun_nio_ch_DatagramDispatcher_write0 Java_sun_nio_ch_DatagramDispatcher_writev0 Java_sun_nio_ch_FileChannelImpl_close0 Java_sun_nio_ch_FileChannelImpl_initIDs Java_sun_nio_ch_FileChannelImpl_map0 Java_sun_nio_ch_FileChannelImpl_position0 Java_sun_nio_ch_FileChannelImpl_transferTo0 Java_sun_nio_ch_FileChannelImpl_unmap0 Java_sun_nio_ch_FileDispatcherImpl_close0 Java_sun_nio_ch_FileDispatcherImpl_closeByHandle Java_sun_nio_ch_FileDispatcherImpl_duplicateHandle Java_sun_nio_ch_FileDispatcherImpl_force0 Java_sun_nio_ch_FileDispatcherImpl_lock0 Java_sun_nio_ch_FileDispatcherImpl_pread0 Java_sun_nio_ch_FileDispatcherImpl_pwrite0 Java_sun_nio_ch_FileDispatcherImpl_read0 Java_sun_nio_ch_FileDispatcherImpl_readv0 Java_sun_nio_ch_FileDispatcherImpl_release0 Java_sun_nio_ch_FileDispatcherImpl_size0 Java_sun_nio_ch_FileDispatcherImpl_truncate0 Java_sun_nio_ch_FileDispatcherImpl_write0 Java_sun_nio_ch_FileDispatcherImpl_writev0 Java_sun_nio_ch_FileKey_init Java_sun_nio_ch_FileKey_initIDs Java_sun_nio_ch_IOUtil_configureBlocking Java_sun_nio_ch_IOUtil_drain Java_sun_nio_ch_IOUtil_fdVal Java_sun_nio_ch_IOUtil_initIDs Java_sun_nio_ch_IOUtil_iovMax Java_sun_nio_ch_IOUtil_randomBytes Java_sun_nio_ch_IOUtil_setfdVal Java_sun_nio_ch_Iocp_close0 Java_sun_nio_ch_Iocp_createIoCompletionPort Java_sun_nio_ch_Iocp_getErrorMessage Java_sun_nio_ch_Iocp_getQueuedCompletionStatus Java_sun_nio_ch_Iocp_initIDs Java_sun_nio_ch_Iocp_osMajorVersion Java_sun_nio_ch_Iocp_postQueuedCompletionStatus Java_sun_nio_ch_Net_bind0 Java_sun_nio_ch_Net_blockOrUnblock4 Java_sun_nio_ch_Net_blockOrUnblock6 Java_sun_nio_ch_Net_canIPv6SocketJoinIPv4Group0 Java_sun_nio_ch_Net_canJoin6WithIPv4Group0 Java_sun_nio_ch_Net_connect0 Java_sun_nio_ch_Net_getIntOption0 Java_sun_nio_ch_Net_getInterface4 Java_sun_nio_ch_Net_getInterface6 Java_sun_nio_ch_Net_initIDs Java_sun_nio_ch_Net_isExclusiveBindAvailable Java_sun_nio_ch_Net_isIPv6Available0 Java_sun_nio_ch_Net_joinOrDrop4 Java_sun_nio_ch_Net_joinOrDrop6 Java_sun_nio_ch_Net_listen Java_sun_nio_ch_Net_localInetAddress Java_sun_nio_ch_Net_localPort Java_sun_nio_ch_Net_poll Java_sun_nio_ch_Net_pollconnValue Java_sun_nio_ch_Net_pollerrValue Java_sun_nio_ch_Net_pollhupValue Java_sun_nio_ch_Net_pollinValue Java_sun_nio_ch_Net_pollnvalValue Java_sun_nio_ch_Net_polloutValue Java_sun_nio_ch_Net_remoteInetAddress Java_sun_nio_ch_Net_remotePort Java_sun_nio_ch_Net_setIntOption0 Java_sun_nio_ch_Net_setInterface4 Java_sun_nio_ch_Net_setInterface6 Java_sun_nio_ch_Net_shutdown Java_sun_nio_ch_Net_socket0 Java_sun_nio_ch_ServerSocketChannelImpl_accept0 Java_sun_nio_ch_ServerSocketChannelImpl_initIDs Java_sun_nio_ch_ServerSocketChannelImpl_listen Java_sun_nio_ch_SocketChannelImpl_checkConnect Java_sun_nio_ch_SocketChannelImpl_initIDs Java_sun_nio_ch_SocketChannelImpl_sendOutOfBandData Java_sun_nio_ch_SocketDispatcher_close0 Java_sun_nio_ch_SocketDispatcher_preClose0 Java_sun_nio_ch_SocketDispatcher_read0 Java_sun_nio_ch_SocketDispatcher_readv0 Java_sun_nio_ch_SocketDispatcher_write0 Java_sun_nio_ch_SocketDispatcher_writev0 Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_close0 Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_lockFile Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_readFile Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_writeFile Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_accept0 Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_closesocket0 Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_initIDs Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_updateAcceptContext Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_closesocket0 Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_connect0 Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_initIDs Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_read0 Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_shutdown0 Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_updateConnectContext Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_write0 Java_sun_nio_ch_WindowsSelectorImpl_00024SubSelector_poll0 Java_sun_nio_ch_WindowsSelectorImpl_discardUrgentData Java_sun_nio_ch_WindowsSelectorImpl_resetWakeupSocket0 Java_sun_nio_ch_WindowsSelectorImpl_setWakeupSocket0 Java_sun_nio_fs_RegistryFileTypeDetector_queryStringValue Java_sun_nio_fs_WindowsNativeDispatcher_AccessCheck Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessAllowedAceEx Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessDeniedAceEx Java_sun_nio_fs_WindowsNativeDispatcher_AdjustTokenPrivileges Java_sun_nio_fs_WindowsNativeDispatcher_BackupRead0 Java_sun_nio_fs_WindowsNativeDispatcher_BackupSeek Java_sun_nio_fs_WindowsNativeDispatcher_CancelIo Java_sun_nio_fs_WindowsNativeDispatcher_CloseHandle Java_sun_nio_fs_WindowsNativeDispatcher_ConvertSidToStringSid Java_sun_nio_fs_WindowsNativeDispatcher_ConvertStringSidToSid0 Java_sun_nio_fs_WindowsNativeDispatcher_CopyFileEx0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateDirectory0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateEvent Java_sun_nio_fs_WindowsNativeDispatcher_CreateFile0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateHardLink0 Java_sun_nio_fs_WindowsNativeDispatcher_CreateIoCompletionPort Java_sun_nio_fs_WindowsNativeDispatcher_CreateSymbolicLink0 Java_sun_nio_fs_WindowsNativeDispatcher_DeleteFile0 Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlGetReparsePoint Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlSetSparse Java_sun_nio_fs_WindowsNativeDispatcher_DuplicateTokenEx Java_sun_nio_fs_WindowsNativeDispatcher_FindClose Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile0 Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile1 Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstStream0 Java_sun_nio_fs_WindowsNativeDispatcher_FindNextFile Java_sun_nio_fs_WindowsNativeDispatcher_FindNextStream Java_sun_nio_fs_WindowsNativeDispatcher_FormatMessage Java_sun_nio_fs_WindowsNativeDispatcher_GetAce Java_sun_nio_fs_WindowsNativeDispatcher_GetAclInformation0 Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentProcess Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentThread Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpaceEx0 Java_sun_nio_fs_WindowsNativeDispatcher_GetDriveType0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributes0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributesEx0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFileInformationByHandle Java_sun_nio_fs_WindowsNativeDispatcher_GetFileSecurity0 Java_sun_nio_fs_WindowsNativeDispatcher_GetFinalPathNameByHandle Java_sun_nio_fs_WindowsNativeDispatcher_GetFullPathName0 Java_sun_nio_fs_WindowsNativeDispatcher_GetLengthSid Java_sun_nio_fs_WindowsNativeDispatcher_GetLogicalDrives Java_sun_nio_fs_WindowsNativeDispatcher_GetOverlappedResult Java_sun_nio_fs_WindowsNativeDispatcher_GetQueuedCompletionStatus0 Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorDacl Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorOwner Java_sun_nio_fs_WindowsNativeDispatcher_GetTokenInformation Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumeInformation0 Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumePathName0 Java_sun_nio_fs_WindowsNativeDispatcher_InitializeAcl Java_sun_nio_fs_WindowsNativeDispatcher_InitializeSecurityDescriptor Java_sun_nio_fs_WindowsNativeDispatcher_LocalFree Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountName0 Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountSid0 Java_sun_nio_fs_WindowsNativeDispatcher_LookupPrivilegeValue0 Java_sun_nio_fs_WindowsNativeDispatcher_MoveFileEx0 Java_sun_nio_fs_WindowsNativeDispatcher_OpenProcessToken Java_sun_nio_fs_WindowsNativeDispatcher_OpenThreadToken Java_sun_nio_fs_WindowsNativeDispatcher_PostQueuedCompletionStatus Java_sun_nio_fs_WindowsNativeDispatcher_ReadDirectoryChangesW Java_sun_nio_fs_WindowsNativeDispatcher_RemoveDirectory0 Java_sun_nio_fs_WindowsNativeDispatcher_SetEndOfFile Java_sun_nio_fs_WindowsNativeDispatcher_SetFileAttributes0 Java_sun_nio_fs_WindowsNativeDispatcher_SetFileSecurity0 Java_sun_nio_fs_WindowsNativeDispatcher_SetFileTime Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorDacl Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorOwner Java_sun_nio_fs_WindowsNativeDispatcher_SetThreadToken Java_sun_nio_fs_WindowsNativeDispatcher_initIDs

SpyLogger V1.1/res/bin/npt.dll

IMPHASH f284c090fedb72b48df4b5500920cc14
SHA256 57d4cc803a188e2e97abb3c1061bfe3abecf88568b4bd7d570ea0e0f9d7223bd
MD5 b365d7820831b1c20c879873fce608bb
SHA1 ed8d9c286511b7e89c56e3039a8f6398e26b8c2f
SHA512 eec6133254ee76c709df1e03a3e4f7cb11fc7ec1ac1622c0e017cf7fe291d39390722098c3445cb08681f92c02c8ad39d5aa76d19682fe69baeb41d44039507c
SSDEEP 192:/IBXHNeVIC7pGBSlkqYOyOj0LL6UhPuniE3XcXMw6A:/IRHUVICdwSlkhONj0n6wPO1e6A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\npt.pdb

SpyLogger V1.1/res/bin/orbd.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 67fde2d34e34b4c6e86b630517c1ffa31da52aa836955cc0d9e23f52fad1998f
MD5 4972811bff46bb6c8184c295fae71ec9
SHA1 4a09f75c551b5cfe4bcafb34919aa38d39c0f304
SHA512 2cf1e1884780e5ee74de514d5eb011ade8cb9d25b95440589195a7f5a7d544715008510437212101c97bb97fe7866de8ffb307e66ec0f2f233505cbcaeb3304c
SSDEEP 96:GKvJvmcT3I+gJqW6SOf6vowZpHEzIiVEfonxfUXVk0+tRleRv5:Lvmg3lzCv9ZcIKEfouqef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\orbd.pdb

SpyLogger V1.1/res/bin/pack200.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 f901bf9e78b05c7e06697c3624002780a135a88b4da85a3f21bccd731fc1ea67
MD5 4d8f2f13e0a1d4d5ad6ba8f1d70b95ff
SHA1 82e0a1c672ddc8acb68417a99c12ce8fbf92331a
SHA512 c847e20a0432662c8e85cd82f523560048f2457582a0ceea923467c09fc299e73557432a0ee146dd97ee380afb79fd89604ddc80f011c753125b2c1d223926c6
SSDEEP 96:DL11rCl6MvKqgRiWOBzoYZx1xygZIIiVEfon+0EUPfVk0etRleRv5:DL1yTnT5oYZtjZIIKEfoHyef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\pack200.pdb

SpyLogger V1.1/res/bin/policytool.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 ac20e3e354d09d2c4440614a31f118b74e5b2e759f0ffdbb10e7ee2fa582bc94
MD5 0c4e8bf00b3e58453924d14dc9d0ff59
SHA1 1bba4c00bd24bf55e014330abc7c66676a76bf9a
SHA512 7a0dbfe189049e36796ed7ce107b0a3701a79e0b1f20315b52079c8f5032d2a1d5445d128bfdc682e132e0017dfdba71604c0847b1e5dec7f6a84ff9581242e8
SSDEEP 96:IST62D1rCl6MvKGrgRiWOBazGZCxyPuIIiVEfoa/UcE9EVk0XtRleRv5x:IST60yTHTkzGZu5IIKEfoBeefx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\policytool.pdb

SpyLogger V1.1/res/bin/rmid.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 d9e0f8ac2ded37ff65737211795374efc86548d0f06abdfc857b3b89322f78b2
MD5 76d1ab91c8fa4479cac141a79b06b89b
SHA1 9efe6cca01d195e55dd3520d1fdacdbcaddaff91
SHA512 526e286dde82a2ee961d5bfcfd147fc65bea5cfed01e8191e2ffeae6ea184077178cd5c3ed5812fc6fd6e75b361bc951f5bae671e849a9fb585168f12cffec71
SSDEEP 96:Wj91rCl6MvKKgRiWOBYkOZVxyFXIiVEfossMlfPKVk055tRleRv5:Wj9yTHT2kOZ7SXIKEfo1MlOXef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\rmid.pdb

SpyLogger V1.1/res/bin/rmiregistry.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 13b056ed75778368ebcbb678ce8b0dc9b095f6e04f05011c1f3fee082e1e1a4f
MD5 31fec73b8060fc786af31b63efee156f
SHA1 5720ebbe5f63b505d5b2a7a776e4e69a92bff5c1
SHA512 5a7284b4c01cbf2f29a8c6dd62aa8f729ad5ece76291f57397f50bc2210c9894b5ed2af4c469bf664d3b1d22facec9048ba91a28a5ab68765972c0ba55269c11
SSDEEP 96:sj91rCl6MvKqgRiWOBzcTZsQxygZIIiVEfoTU3Vk0ctRleRv5:sj9yTnT5cTZsQjZIIKEfo4Eef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\rmiregistry.pdb

SpyLogger V1.1/res/bin/sawindbg.dll

IMPHASH d455f4b5cfa2fe040d2b4d800844d01f
SHA256 39bdc5d1a1f87e8791b837daf71b4d0aed15670e13d3b719102d538e6353798b
MD5 6546d985a64b13d84112ab537069a3e9
SHA1 36a89f605840f80fab3bde7727b6c463f48264cd
SHA512 0c1fd25e40e7a8fa86a6677385387d6deedfbf66a40e2bc788f68a07e61e45b99c14b0f374022ea8d8bc3c600d6e034e5bef6bd3013a5acdc6c788339e8d3e05
SSDEEP 384:73r14W78g1/XVfujj0xyErPJJHNV84ymYU+W7NNkvehqyDO/rC6fdLe:j/8gjfGEzJtNV8R7U+wN6vFSO/Zd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

19624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

SpyLogger V1.1/res/bin/server/Xusage.txt

SHA256 37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08
MD5 b3174769a9e9e654812315468ae9c5fa
SHA1 238b369dfc7eb8f0dc6a85cdd080ed4b78388ca8
SHA512 0815ca93c8cf762468de668ad7f0eb0bdd3802dcaa42d55f2fb57a4ae23d9b9e2fe148898a28fe22c846a4fcdf1ee5190e74bcdabf206f73da2de644ea62a5d3
MD5 SHA1 SHA512

SpyLogger V1.1/res/bin/server/jvm.dll

IMPHASH 256beed0ed5b467f20bee3afefc84fc4
SHA256 3fadcb37a6c0c2b3db1609d24d4f1eff503ff177d838e98fccd42d456f41ee74
MD5 f117324270c41debb173aaebef498ffe
SHA1 5ae6261c267b505c7d90c1a6607a048b41e5391a
SHA512 11fe5ca78aeaf75552d6c763b5cf7babdaa6e704de06f177685be101aa21857e0cbcbfa9bb711060c127083def9cd1b024fdc1b59715b885538c08d57bd0bb5e
SSDEEP 98304:20S5nIujgwoGWtC9vt8SFmP+uTbHdF6upwBpPV+o:M5nIujgdGWtwvt8SFmPNbHdwup2pP1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5911600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

SetEnvironmentVariableA DebugBreak VirtualQuery GetSystemTimeAsFileTime QueryPerformanceCounter GlobalMemoryStatusEx GetProcessAffinityMask QueryPerformanceFrequency GetThreadTimes GetCurrentThread GetLocalTime GetProcessTimes FindFirstFileA FindClose FindNextFileA GetTempPathA FormatMessageA SetConsoleCtrlHandler VirtualFree VirtualProtect ResumeThread Sleep SetThreadPriority GetThreadPriority ResetEvent GetThreadContext GetCurrentThreadId GetVersionExA GetSystemInfo IsDebuggerPresent TlsAlloc TlsSetValue DuplicateHandle IsDBCSLeadByte SetEndOfFile SetFilePointer PeekNamedPipe PeekConsoleInputA GetEnvironmentVariableA GetStdHandle MapViewOfFileEx CreateFileMappingA ReadFile VirtualAlloc UnmapViewOfFile SetEvent GetExitCodeProcess CreateProcessA CreateToolhelp32Snapshot Module32First Module32Next GetNativeSystemInfo GetSystemDirectoryA GetWindowsDirectoryA OpenProcess SwitchToThread GetTimeZoneInformation HeapUnlock HeapValidate HeapWalk HeapLock GetProcessHeap LocalFree GetCurrentProcessId WaitForMultipleObjects GetVolumeInformationA CreateDirectoryA OpenFileMappingA MapViewOfFile SetUnhandledExceptionFilter RtlCaptureContext RtlAddFunctionTable DecodePointer GetTickCount RtlLookupFunctionEntry RtlVirtualUnwind LoadLibraryA GetModuleHandleA GetModuleFileNameA GetFileAttributesA GetCurrentProcess FlushFileBuffers CloseHandle CreateMutexA CreateSemaphoreA ReleaseSemaphore WriteFile CreateFileA GetLastError WaitForSingleObject ReleaseMutex CreateEventA FreeLibrary GetProcAddress GetNumberOfConsoleInputEvents TlsGetValue UnhandledExceptionFilter TerminateProcess EncodePointer

user32

GetProcessWindowStation MessageBoxA GetUserObjectInformationA

advapi32

AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor InitializeAcl GetAce EqualSid AddAce GetAclInformation AddAccessAllowedAce SetSecurityDescriptorDacl GetTokenInformation GetLengthSid CopySid GetSecurityDescriptorDacl GetUserNameA LookupPrivilegeValueA OpenProcessToken AdjustTokenPrivileges SetFileSecurityA

wsock32

getsockname setsockopt shutdown gethostname select WSAStartup recv recvfrom sendto accept connect listen socket inet_ntoa closesocket send bind getsockopt

winmm

timeEndPeriod timeBeginPeriod timeGetTime

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

psapi

GetModuleInformation GetModuleFileNameExA EnumProcessModules

msvcr100

_chmod __clean_type_info_names_internal ?_type_info_dtor_internal_method@type_info@@QEAAXXZ ?terminate@@YAXXZ __crt_debugger_hook __CppXcptFilter _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt _timezone _onexit _lock __dllonexit _unlock _vsnprintf strtoul _wassert frexp fmodf ceil _finite _beginthreadex _fstat64 _snprintf _get_osfhandle _purecall memset memcpy memmove __C_specific_handler ?_open@@YAHPEBDHH@Z qsort strncpy strncmp _read _close _strdup fclose fgets fopen strrchr sprintf strchr memcmp _unlink sscanf strstr getc isspace strpbrk __iob_func _lseek strerror _errno remove _write exit strtok fflush printf memchr _isnan vfprintf realloc isalnum exp isdigit _stricmp atoi strncat fscanf atol strtod strtol free malloc _ctime64 _time64 strcspn fmod sqrt floor _strnicmp fputc fwrite rewind rename ??3@YAXPEAX@Z _localtime64 _stat64i32 _exit _getdrive _getcwd _access getenv signal raise _getpid _setmode _fileno fgetc fprintf _fdopen _lseeki64 isalpha

??_7?$AscendTreeCensusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$AscendTreeCensusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$AscendTreeCensusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$BeginSweepClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$BeginSweepClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$BeginSweepClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$BinaryTreeDictionary@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$BinaryTreeDictionary@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$BinaryTreeDictionary@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$DCmdArgument@PEAD@@6B@ ??_7?$DCmdArgument@PEAVStringArrayArgument@@@@6B@ ??_7?$DCmdArgument@VMemorySizeArgument@@@@6B@ ??_7?$DCmdArgument@VNanoTimeArgument@@@@6B@ ??_7?$DCmdArgument@_J@@6B@ ??_7?$DCmdArgument@_N@@6B@ ??_7?$DCmdFactoryImpl@VClassHistogramDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VClassStatsDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VCommandLineDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VHeapDumpDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VHelpDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VJMXStartLocalDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VJMXStartRemoteDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VJMXStopRemoteDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VNMTDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VPrintSystemPropertiesDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VPrintVMFlagsDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VRotateGCLogDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VRunFinalizationDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VSystemGCDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VThreadDumpDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VVMUptimeDCmd@@@@6B@ ??_7?$DCmdFactoryImpl@VVersionDCmd@@@@6B@ ??_7?$DescendTreeCensusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$DescendTreeCensusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$DescendTreeCensusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$DescendTreeSearchClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$DescendTreeSearchClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$DescendTreeSearchClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$EndTreeSearchClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$EndTreeSearchClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$EndTreeSearchClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$EventLogBase@VGCMessage@@@@6B@ ??_7?$EventLogBase@VStringLogMessage@@@@6B@ ??_7?$FreeBlockDictionary@VFreeChunk@@@@6B@ ??_7?$FreeBlockDictionary@VMetablock@@@@6B@ ??_7?$FreeBlockDictionary@VMetachunk@@@@6B@ ??_7?$G1BiasedMappedArray@I@@6B@ ??_7?$G1BiasedMappedArray@PEAVHeapRegion@@@@6B@ ??_7?$G1BiasedMappedArray@UInCSetState@@@@6B@ ??_7?$G1BiasedMappedArray@_N@@6B@ ??_7?$G1CLDClosure@$00@G1ParTask@@6B@ ??_7?$G1CLDClosure@$01@G1ParTask@@6B@ ??_7?$G1CLDClosure@$0A@@G1ParTask@@6B@ ??_7?$G1ParCopyClosure@$00$0A@@@6B@ ??_7?$G1ParCopyClosure@$01$00@@6B@ ??_7?$G1ParCopyClosure@$01$01@@6B@ ??_7?$G1ParCopyClosure@$01$0A@@@6B@ ??_7?$G1ParCopyClosure@$0A@$00@@6B@ ??_7?$G1ParCopyClosure@$0A@$01@@6B@ ??_7?$G1ParCopyClosure@$0A@$0A@@@6B@ ??_7?$GenericTaskQueueSet@V?$GenericTaskQueue@PEAVoopDesc@@$04$0CAAAA@@@$04@@6B@ ??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VObjArrayTask@@$04$0CAAA@@@$04@@6B@ ??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VStarTask@@$00$0CAAAA@@@$00@@6B@ ??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@VStarTask@@$04$0CAAAA@@@$04@@6B@ ??_7?$GenericTaskQueueSet@V?$OverflowTaskQueue@_K$06$0CAAAA@@@$00@@6B@ ??_7?$GenericTaskQueueSet@V?$Padded@V?$GenericTaskQueue@PEAVoopDesc@@$04$0CAAAA@@@$0EA@@@$04@@6B@ ??_7?$LinkedList@VCommittedMemoryRegion@@@@6B@ ??_7?$LinkedList@VMallocSite@@@@6B@ ??_7?$LinkedList@VReservedMemoryRegion@@@@6B@ ??_7?$LinkedList@VVirtualMemoryAllocationSite@@@@6B@ ??_7?$LinkedListImpl@VCommittedMemoryRegion@@$01$09$00@@6B@ ??_7?$LinkedListImpl@VMallocSite@@$01$09$00@@6B@ ??_7?$LinkedListImpl@VReservedMemoryRegion@@$01$09$00@@6B@ ??_7?$LinkedListImpl@VVirtualMemoryAllocationSite@@$01$09$00@@6B@ ??_7?$PSRootsClosure@$00@@6B@ ??_7?$PSRootsClosure@$0A@@@6B@ ??_7?$PrintFreeListsClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$PrintFreeListsClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$PrintFreeListsClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$PrintTreeCensusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$PrintTreeCensusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$PrintTreeCensusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$SortedLinkedList@VCommittedMemoryRegion@@$1?compare_committed_region@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VMallocSite@@$1?compare_malloc_site@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VMallocSite@@$1?compare_malloc_size@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VReservedMemoryRegion@@$1?compare_reserved_region_base@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VReservedMemoryRegion@@$1?compare_virtual_memory_base@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_allocation_site@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_virtual_memory_site@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$SortedLinkedList@VVirtualMemoryAllocationSite@@$1?compare_virtual_memory_size@@YAHAEBV1@0@Z$01$09$00@@6B@ ??_7?$Stack@PEAVKlass@@$04@@6B@ ??_7?$Stack@PEAV_jclass@@$06@@6B@ ??_7?$Stack@PEAVmarkOopDesc@@$04@@6B@ ??_7?$Stack@PEAVoopDesc@@$04@@6B@ ??_7?$Stack@VObjArrayTask@@$04@@6B@ ??_7?$Stack@VStarTask@@$00@@6B@ ??_7?$Stack@VStarTask@@$04@@6B@ ??_7?$Stack@_K$06@@6B@ ??_7?$TaskQueueSetSuperImpl@$00@@6B@ ??_7?$TaskQueueSetSuperImpl@$04@@6B@ ??_7?$TreeCensusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$TreeCensusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$TreeCensusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$TreeSearchClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$TreeSearchClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$TreeSearchClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$TypedMethodOptionMatcher@PEBD@@6B@ ??_7?$TypedMethodOptionMatcher@_J@@6B@ ??_7?$TypedMethodOptionMatcher@_K@@6B@ ??_7?$TypedMethodOptionMatcher@_N@@6B@ ??_7?$clearTreeCensusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$clearTreeCensusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$clearTreeCensusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$setTreeHintsClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$setTreeHintsClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$setTreeHintsClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7?$setTreeSurplusClosure@VFreeChunk@@V?$AdaptiveFreeList@VFreeChunk@@@@@@6B@ ??_7?$setTreeSurplusClosure@VMetablock@@V?$FreeList@VMetablock@@@@@@6B@ ??_7?$setTreeSurplusClosure@VMetachunk@@V?$FreeList@VMetachunk@@@@@@6B@ ??_7ASConcurrentMarkSweepGeneration@@6B@ ??_7ASConcurrentMarkSweepPolicy@@6B@ ??_7ASPSOldGen@@6B@ ??_7ASPSYoungGen@@6B@ ??_7ASParNewGeneration@@6B@ ??_7AbsDNode@@6B@ ??_7AbsFNode@@6B@ ??_7AbsNode@@6B@ ??_7AbsSeq@@6B@ ??_7AbstractAssembler@@6B@ ??_7AbstractCompiler@@6B@ ??_7AbstractDecoder@@6B@ ??_7AbstractGangTask@@6B@ ??_7AbstractGangTaskWOopQueues@@6B@ ??_7AbstractLockNode@@6B@ ??_7AbstractRefProcTaskExecutor@@6B@ ??_7AbstractWorkGang@@6B@ ??_7AccessArray@@6B@ ??_7AccessField@@6B@ ??_7AccessIndexed@@6B@ ??_7AccessMonitor@@6B@ ??_7AdapterBlob@@6B@ ??_7AdaptiveSizePolicy@@6B@ ??_7AddDNode@@6B@ ??_7AddFNode@@6B@ ??_7AddINode@@6B@ ??_7AddLNode@@6B@ ??_7AddNode@@6B@ ??_7AddPNode@@6B@ ??_7AddVBNode@@6B@ ??_7AddVDNode@@6B@ ??_7AddVFNode@@6B@ ??_7AddVINode@@6B@ ??_7AddVLNode@@6B@ ??_7AddVSNode@@6B@ ??_7AddressConstant@@6B@ ??_7AddressType@@6B@ ??_7AdjustCpoolCacheAndVtable@VM_RedefineClasses@@6B@ ??_7AdjustKlassClosure@PSParallelCompact@@6B@ ??_7AdjustPointerClosure@MarkSweep@@6B@ ??_7AdjustPointerClosure@PSParallelCompact@@6B@ ??_7AdjustPointersClosure@@6B@ ??_7AdvancedThresholdPolicy@@6B@ ??_7AggregateCountDataHRClosure@@6B@ ??_7AllClassesFinder@KlassInfoTable@@6B@ ??_7AllocRecordClosure@Metaspace@@6B@ ??_7AllocateArrayNode@@6B@ ??_7AllocateNode@@6B@ ??_7AlwaysAliveClosure@@6B@ ??_7AlwaysClearPolicy@@6B@ ??_7AlwaysFalseClosure@@6B@ ??_7AlwaysTrueClosure@@6B@ ??_7AndINode@@6B@ ??_7AndLNode@@6B@ ??_7AndVNode@@6B@ ??_7ArgInfoData@@6B@ ??_7ArgumentCount@@6B@ ??_7ArgumentOffsetComputer@@6B@ ??_7ArgumentSizeComputer@@6B@ ??_7ArithmeticOp@@6B@ ??_7ArrayConstant@@6B@ ??_7ArrayCopyStub@@6B@ ??_7ArrayData@@6B@ ??_7ArrayKlass@@6B@ ??_7ArrayLength@@6B@ ??_7ArrayStoreExceptionStub@@6B@ ??_7ArrayType@@6B@ ??_7AryEqNode@@6B@ ??_7Assembler@@6B@ ??_7AttachOperation@@6B@ ??_7BarrierGCTask@@6B@ ??_7BarrierSet@@6B@ ??_7Base@@6B@ ??_7BinaryNode@@6B@ ??_7BitData@@6B@ ??_7BitMapClosure@@6B@ ??_7BlkClosure@@6B@ ??_7BlkClosureCareful@@6B@ ??_7BlkPrintingClosure@@6B@ ??_7Block@@6B@ ??_7BlockBegin@@6B@ ??_7BlockClosure@@6B@ ??_7BlockEnd@@6B@ ??_7BlockMerger@@6B@ ??_7BlockOffsetArray@@6B@ ??_7BlockOffsetArrayContigSpace@@6B@ ??_7BlockOffsetArrayNonContigSpace@@6B@ ??_7BlockOffsetTable@@6B@ ??_7BoolNode@@6B@ ??_7BoolObjectClosure@@6B@ ??_7BoxLockNode@@6B@ ??_7BranchData@@6B@ ??_7BufferBlob@@6B@ ??_7BufferingOopClosure@@6B@ ??_7C1_MacroAssembler@@6B@ ??_7C2Compiler@@6B@ ??_7CE_Eliminator@@6B@ ??_7CFGElement@@6B@ ??_7CFGLoop@@6B@ ??_7CLDClosure@@6B@ ??_7CLDToKlassAndOopClosure@@6B@ ??_7CLDToOopClosure@@6B@ ??_7CMBitMapClosure@@6B@ ??_7CMBitMapMappingChangedListener@@6B@ ??_7CMCheckpointRootsFinalClosure@@6B@ ??_7CMCleanUp@@6B@ ??_7CMConcurrentMarkingTask@@6B@ ??_7CMCountDataClosureBase@@6B@ ??_7CMRemarkTask@@6B@ ??_7CMRootRegionScanTask@@6B@ ??_7CMSATBBufferClosure@@6B@ ??_7CMSAdaptiveSizePolicy@@6B@ ??_7CMSConcMarkingTask@@6B@ ??_7CMSConcMarkingTerminator@@6B@ ??_7CMSConcMarkingTerminatorTerminator@@6B@ ??_7CMSDrainMarkingStackClosure@@6B@ ??_7CMSGCAdaptivePolicyCounters@@6B@ ??_7CMSGCStats@@6B@ ??_7CMSInnerParMarkAndPushClosure@@6B@ ??_7CMSIsAliveClosure@@6B@ ??_7CMSKeepAliveClosure@@6B@ ??_7CMSMemoryManager@@6B@ ??_7CMSParDrainMarkingStackClosure@@6B@ ??_7CMSParInitialMarkTask@@6B@ ??_7CMSParKeepAliveClosure@@6B@ ??_7CMSParMarkTask@@6B@ ??_7CMSParRemarkTask@@6B@ ??_7CMSPrecleanRefsYieldClosure@@6B@ ??_7CMSRefEnqueueTaskProxy@@6B@ ??_7CMSRefProcTaskExecutor@@6B@ ??_7CMSRefProcTaskProxy@@6B@ ??_7CMSTracer@@6B@ ??_7CMTask@@6B@ ??_7CMoveDNode@@6B@ ??_7CMoveFNode@@6B@ ??_7CMoveINode@@6B@ ??_7CMoveLNode@@6B@ ??_7CMoveNNode@@6B@ ??_7CMoveNode@@6B@ ??_7CMovePNode@@6B@ ??_7CProjNode@@6B@ ??_7CSpaceCounters@@6B@ ??_7CalcLiveObjectsClosure@@6B@ ??_7CallDynamicJavaDirectNode@@6B@ ??_7CallDynamicJavaNode@@6B@ ??_7CallGenerator@@6B@ ??_7CallJavaNode@@6B@ ??_7CallLeafDirectNode@@6B@ ??_7CallLeafNoFPDirectNode@@6B@ ??_7CallLeafNoFPNode@@6B@ ??_7CallLeafNode@@6B@ ??_7CallNode@@6B@ ??_7CallRelocation@@6B@ ??_7CallRuntimeDirectNode@@6B@ ??_7CallRuntimeNode@@6B@ ??_7CallSiteDepChange@@6B@ ??_7CallStaticJavaDirectNode@@6B@ ??_7CallStaticJavaNode@@6B@ ??_7CallTypeData@@6B@ ??_7Canonicalizer@@6B@ ??_7CardGeneration@@6B@ ??_7CardTableEntryClosure@@6B@ ??_7CardTableExtension@@6B@ ??_7CardTableModRefBS@@6B@ ??_7CardTableModRefBSForCTRS@@6B@ ??_7CardTableRS@@6B@ ??_7CastIINode@@6B@ ??_7CastP2XNode@@6B@ ??_7CastPPNode@@6B@ ??_7CastX2PNode@@6B@ ??_7CatchNode@@6B@ ??_7CatchProjNode@@6B@ ??_7ChangeItem@@6B@ ??_7ChangeJumpWiden@@6B@ ??_7ChangeSwitchPad@@6B@ ??_7ChangeWiden@@6B@ ??_7CheckBitmapClearHRClosure@@6B@ ??_7CheckCast@@6B@ ??_7CheckCastPPNode@@6B@ ??_7CheckClass@VM_RedefineClasses@@6B@ ??_7CheckForPreciseMarks@@6B@ ??_7CheckForUnmarkedObjects@@6B@ ??_7CheckForUnmarkedOops@@6B@ ??_7ChunkPoolCleaner@@6B@ ??_7ClassConstant@@6B@ ??_7ClassHistogramDCmd@@6B@ ??_7ClassPathDirEntry@@6B@ ??_7ClassPathEntry@@6B@ ??_7ClassPathZipEntry@@6B@ ??_7ClassStatsDCmd@@6B@ ??_7ClassType@@6B@ ??_7ClearArrayNode@@6B@ ??_7ClearBitmapHRClosure@@6B@ ??_7ClearKlassModUnionClosure@@6B@ ??_7ClearLoggedCardTableEntryClosure@@6B@ ??_7ClearNoncleanCardWrapper@@6B@ ??_7CmpD3Node@@6B@ ??_7CmpDNode@@6B@ ??_7CmpF3Node@@6B@ ??_7CmpFNode@@6B@ ??_7CmpINode@@6B@ ??_7CmpL3Node@@6B@ ??_7CmpLNode@@6B@ ??_7CmpLTMaskNode@@6B@ ??_7CmpNNode@@6B@ ??_7CmpNode@@6B@ ??_7CmpPNode@@6B@ ??_7CmpULNode@@6B@ ??_7CmpUNode@@6B@ ??_7CodeBlob@@6B@ ??_7CodeBlobClosure@@6B@ ??_7CodeBlobToOopClosure@@6B@ ??_7CodeCacheMemoryManager@@6B@ ??_7CodeHeapPool@@6B@ ??_7CodeStub@@6B@ ??_7CollectedHeap@@6B@ ??_7CollectedMemoryPool@@6B@ ??_7CollectorPolicy@@6B@ ??_7CommandLineDCmd@@6B@ ??_7CommitRefcountArray@G1RegionsSmallerThanCommitSizeMapper@@6B@ ??_7CompactibleFreeListSpace@@6B@ ??_7CompactibleFreeListSpacePool@@6B@ ??_7CompactibleSpace@@6B@ ??_7CompareAndSwapINode@@6B@ ??_7CompareAndSwapLNode@@6B@ ??_7CompareAndSwapNNode@@6B@ ??_7CompareAndSwapPNode@@6B@ ??_7CompareOp@@6B@ ??_7CompilationLog@@6B@ ??_7CompilationPolicy@@6B@ ??_7CompileLog@@6B@ ??_7CompiledArgumentOopFinder@@6B@ ??_7CompiledRFrame@@6B@ ??_7Compiler@@6B@ ??_7CompilerThread@@6B@ ??_7CompressedKlassSpacePool@@6B@ ??_7ComputeCallStack@@6B@ ??_7ComputeEntryStack@@6B@ ??_7ConDNode@@6B@ ??_7ConFNode@@6B@ ??_7ConINode@@6B@ ??_7ConLNode@@6B@ ??_7ConNKlassNode@@6B@ ??_7ConNNode@@6B@ ??_7ConNode@@6B@ ??_7ConPNode@@6B@ ??_7ConcEdenSpace@@6B@ ??_7ConcurrentG1RefineThread@@6B@ ??_7ConcurrentGCThread@@6B@ ??_7ConcurrentGCTimer@@6B@ ??_7ConcurrentMarkSweepGeneration@@6B@ ??_7ConcurrentMarkSweepPolicy@@6B@ ??_7ConcurrentMarkSweepThread@@6B@ ??_7ConcurrentMarkThread@@6B@ ??_7Constant@@6B@ ??_7ConstantDoubleValue@@6B@ ??_7ConstantIntValue@@6B@ ??_7ConstantLongValue@@6B@ ??_7ConstantOopReadValue@@6B@ ??_7ConstantOopWriteValue@@6B@ ??_7ConstantPool@@6B@ ??_7ConstraintCastNode@@6B@ ??_7ContiguousSpace@@6B@ ??_7ContiguousSpaceDCTOC@@6B@ ??_7ContiguousSpacePool@@6B@ ??_7ContiguousSpaceUsedHelper@@6B@ ??_7Conv2BNode@@6B@ ??_7ConvD2FNode@@6B@ ??_7ConvD2INode@@6B@ ??_7ConvD2LNode@@6B@ ??_7ConvF2DNode@@6B@ ??_7ConvF2INode@@6B@ ??_7ConvF2LNode@@6B@ ??_7ConvI2DNode@@6B@ ??_7ConvI2FNode@@6B@ ??_7ConvI2LNode@@6B@ ??_7ConvL2DNode@@6B@ ??_7ConvL2FNode@@6B@ ??_7ConvL2INode@@6B@ ??_7ConversionStub@@6B@ ??_7Convert@@6B@ ??_7CopyFailedInfo@@6B@ ??_7CopyMemoryManager@@6B@ ??_7CosDNode@@6B@ ??_7CountBitsNode@@6B@ ??_7CountHandleClosure@@6B@ ??_7CountInterfacesClosure@@6B@ ??_7CountLeadingZerosINode@@6B@ ??_7CountLeadingZerosLNode@@6B@ ??_7CountNonCleanMemRegionClosure@@6B@ ??_7CountTrailingZerosINode@@6B@ ??_7CountTrailingZerosLNode@@6B@ ??_7CountedLoopEndNode@@6B@ ??_7CountedLoopNode@@6B@ ??_7CounterData@@6B@ ??_7CounterOverflowStub@@6B@ ??_7CreateExNode@@6B@ ??_7CreateExceptionNode@@6B@ ??_7CriticalEdgeFinder@@6B@ ??_7DCmd@@6B@ ??_7DCmdFactory@@6B@ ??_7DCmdWithParser@@6B@ ??_7DataRelocation@@6B@ ??_7DecodeNKlassNode@@6B@ ??_7DecodeNNode@@6B@ ??_7DecodeNarrowPtrNode@@6B@ ??_7DefNewGeneration@@6B@ ??_7DefNewTracer@@6B@ ??_7DeoptimizationBlob@@6B@ ??_7DeoptimizeStub@@6B@ ??_7DeoptimizedRFrame@@6B@ ??_7DepChange@@6B@ ??_7DetectScavengeRoot@@6B@ ??_7DirectCallGenerator@@6B@ ??_7DirtyCardQueue@@6B@ ??_7DirtyCardQueueSet@@6B@ ??_7DirtyCardToOopClosure@@6B@ ??_7DivByZeroStub@@6B@ ??_7DivDNode@@6B@ ??_7DivFNode@@6B@ ??_7DivINode@@6B@ ??_7DivLNode@@6B@ ??_7DivModINode@@6B@ ??_7DivModLNode@@6B@ ??_7DivModNode@@6B@ ??_7DivVDNode@@6B@ ??_7DivVFNode@@6B@ ??_7DoNothingClosure@@6B@ ??_7DoubleConstant@@6B@ ??_7DoubleType@@6B@ ??_7DrainStacksCompactionTask@@6B@ ??_7DumpAllocClosure@@6B@ ??_7EdenMutableSpacePool@@6B@ ??_7EdenSpace@@6B@ ??_7EnableBiasedLockingTask@@6B@ ??_7EncodeISOArrayNode@@6B@ ??_7EncodeNarrowPtrNode@@6B@ ??_7EncodePKlassNode@@6B@ ??_7EncodePNode@@6B@ ??_7EnqueueTask@AbstractRefProcTaskExecutor@@6B@ ??_7EntryFrameOopFinder@@6B@ ??_7EvacuateFollowersClosure@DefNewGeneration@@6B@ ??_7EvacuateFollowersClosureGeneral@@6B@ ??_7EvacuationFailedInfo@@6B@ ??_7EventLog@@6B@ ??_7ExceptionBlob@@6B@ ??_7ExceptionObject@@6B@ ??_7ExpDNode@@6B@ ??_7ExtendedOopClosure@@6B@ ??_7ExtractBNode@@6B@ ??_7ExtractCNode@@6B@ ??_7ExtractDNode@@6B@ ??_7ExtractFNode@@6B@ ??_7ExtractINode@@6B@ ??_7ExtractLNode@@6B@ ??_7ExtractNode@@6B@ ??_7ExtractSNode@@6B@ ??_7ExtractUBNode@@6B@ ??_7FastEvacuateFollowersClosure@DefNewGeneration@@6B@ ??_7FastKeepAliveClosure@DefNewGeneration@@6B@ ??_7FastLockNode@@6B@ ??_7FastScanClosure@@6B@ ??_7FastUnlockNode@@6B@ ??_7FieldClosure@@6B@ ??_7FieldReassigner@@6B@ ??_7FieldStream@@6B@ ??_7FileMapHeader@FileMapInfo@@6B@ ??_7FileMapHeaderBase@FileMapInfo@@6B@ ??_7FillClosure@@6B@ ??_7FilterIntoCSClosure@@6B@ ??_7FilterOutOfRegionClosure@@6B@ ??_7FilteredFieldStream@@6B@ ??_7FilteringClosure@@6B@ ??_7Filtering_DCTOC@@6B@ ??_7FinalCountDataUpdateClosure@@6B@ ??_7FindInstanceClosure@@6B@ ??_7Fingerprinter@@6B@ ??_7FlatProfilerTask@@6B@ ??_7FlexibleGangTask@@6B@ ??_7FlexibleWorkGang@@6B@ ??_7FloatConstant@@6B@ ??_7FloatType@@6B@ ??_7FollowKlassClosure@PSParallelCompact@@6B@ ??_7FollowRootClosure@MarkSweep@@6B@ ??_7FollowStackClosure@MarkSweep@@6B@ ??_7FollowStackClosure@PSParallelCompact@@6B@ ??_7FreeListSpace_DCTOC@@6B@ ??_7FreeRegionList@@6B@ ??_7G1AdjustPointersClosure@@6B@ ??_7G1AggregateCountDataTask@@6B@ ??_7G1AllocRegion@@6B@ ??_7G1Allocator@@6B@ ??_7G1AlwaysAliveClosure@@6B@ ??_7G1AlwaysTrueClosure@@6B@ ??_7G1BlockOffsetArray@@6B@ ??_7G1BlockOffsetArrayContigSpace@@6B@ ??_7G1BlockOffsetSharedArrayMappingChangedListener@@6B@ ??_7G1BlockOffsetTable@@6B@ ??_7G1CMDrainMarkingStackClosure@@6B@ ??_7G1CMIsAliveClosure@@6B@ ??_7G1CMKeepAliveAndDrainClosure@@6B@ ??_7G1CMOopClosure@@6B@ ??_7G1CMRefEnqueueTaskProxy@@6B@ ??_7G1CMRefProcTaskExecutor@@6B@ ??_7G1CMRefProcTaskProxy@@6B@ ??_7G1CardCountsClearClosure@@6B@ ??_7G1CardCountsMappingChangedListener@@6B@ ??_7G1CodeBlobClosure@@6B@ ??_7G1CollectedHeap@@6B@ ??_7G1CollectorPolicy@@6B@ ??_7G1CollectorPolicyExt@@6B@ ??_7G1CopyingKeepAliveClosure@@6B@ ??_7G1DefaultAllocator@@6B@ ??_7G1DefaultParGCAllocator@@6B@ ??_7G1EdenPool@@6B@ ??_7G1FreeHumongousRegionClosure@@6B@ ??_7G1GenerationCounters@@6B@ ??_7G1HeapRegionTable@@6B@ ??_7G1InCSetStateFastTestBiasedMappedArray@@6B@ ??_7G1InvokeIfNotTriggeredClosure@@6B@ ??_7G1KeepAliveClosure@@6B@ ??_7G1KlassScanClosure@@6B@ ??_7G1MMUTracker@@6B@ ??_7G1MMUTrackerQueue@@6B@ ??_7G1MappingChangedListener@@6B@ ??_7G1MemoryPoolSuper@@6B@ ??_7G1Mux2Closure@@6B@ ??_7G1NewTracer@@6B@ ??_7G1NoteEndOfConcMarkClosure@@6B@ ??_7G1OffsetTableContigSpace@@6B@ ??_7G1OldGenMemoryManager@@6B@ ??_7G1OldGenPool@@6B@ ??_7G1OldGenerationCounters@@6B@ ??_7G1OldTracer@@6B@ ??_7G1ParCleanupCTTask@@6B@ ??_7G1ParClosureSuper@@6B@ ??_7G1ParCopyHelper@@6B@ ??_7G1ParEvacuateFollowersClosure@@6B@ ??_7G1ParFinalCountTask@@6B@ ??_7G1ParGCAllocBuffer@@6B@ ??_7G1ParGCAllocator@@6B@ ??_7G1ParNoteEndTask@@6B@ ??_7G1ParPreserveCMReferentsTask@@6B@ ??_7G1ParPushHeapRSClosure@@6B@ ??_7G1ParRemoveSelfForwardPtrsTask@@6B@ ??_7G1ParScanClosure@@6B@ ??_7G1ParScrubRemSetTask@@6B@ ??_7G1ParTask@@6B@ ??_7G1ParVerifyFinalCountTask@@6B@ ??_7G1ParVerifyTask@@6B@ ??_7G1ParallelCleaningTask@@6B@ ??_7G1PostBarrierStub@@6B@ ??_7G1PreBarrierStub@@6B@ ??_7G1PrepareCompactClosure@@6B@ ??_7G1PrintRegionLivenessInfoClosure@@6B@ ??_7G1RedirtyLoggedCardsTask@@6B@ ??_7G1RegionMappingChangedListener@@6B@ ??_7G1RegionToSpaceMapper@@6B@ ??_7G1RegionsLargerThanCommitSizeMapper@@6B@ ??_7G1RegionsSmallerThanCommitSizeMapper@@6B@ ??_7G1RemSet@@6B@ ??_7G1RemarkThreadsClosure@@6B@ ??_7G1RootRegionScanClosure@@6B@ ??_7G1SATBCardTableLoggingModRefBS@@6B@ ??_7G1SATBCardTableLoggingModRefBSChangedListener@@6B@ ??_7G1SATBCardTableModRefBS@@6B@ ??_7G1STWDrainQueueClosure@@6B@ ??_7G1STWIsAliveClosure@@6B@ ??_7G1STWRefEnqueueTaskProxy@@6B@ ??_7G1STWRefProcTaskExecutor@@6B@ ??_7G1STWRefProcTaskProxy@@6B@ ??_7G1SpaceCompactClosure@@6B@ ??_7G1StringDedupThread@@6B@ ??_7G1StringDedupUnlinkOrOopsDoTask@@6B@ ??_7G1StringSymbolTableUnlinkTask@@6B@ ??_7G1SurvivorPool@@6B@ ??_7G1TriggerClosure@@6B@ ??_7G1UpdateRSOrPushRefOopClosure@@6B@ ??_7G1VerificationClosure@@6B@ ??_7G1VerifyCodeRootBlobClosure@@6B@ ??_7G1VerifyCodeRootOopClosure@@6B@ ??_7G1YoungGenMemoryManager@@6B@ ??_7G1YoungGenerationCounters@@6B@ ??_7GCAdaptivePolicyCounters@@6B@ ??_7GCHeapLog@@6B@ ??_7GCHeapSummary@@6B@ ??_7GCHeapSummaryEventSender@@6B@ ??_7GCHeapSummaryVisitor@@6B@ ??_7GCMemoryManager@@6B@ ??_7GCPhase@@6B@ ??_7GCPolicyCounters@@6B@ ??_7GCStats@@6B@ ??_7GCTask@@6B@ ??_7GCTaskQueue@@6B@ ??_7GCTaskThread@@6B@ ??_7GCTimer@@6B@ ??_7GCTracer@@6B@ ??_7GangWorker@@6B@ ??_7GcThreadCountClosure@@6B@ ??_7GenAdjustPointersClosure@@6B@ ??_7GenClosure@GenCollectedHeap@@6B@ ??_7GenCollectedHeap@@6B@ ??_7GenCollectorPolicy@@6B@ ??_7GenCompactClosure@@6B@ ??_7GenDCmdArgument@@6B@ ??_7GenEnsureParsabilityClosure@@6B@ ??_7GenGCEpilogueClosure@@6B@ ??_7GenGCPrologueClosure@@6B@ ??_7GenPrepareForVerifyClosure@@6B@ ??_7GenRemSet@@6B@ ??_7GenSpaceMangler@@6B@ ??_7GenTimeOfLastGCClosure@@6B@ ??_7GenerateOopMap@@6B@ ??_7GeneratePairingInfo@@6B@ ??_7Generation@@6B@ ??_7GenerationBlockIsObjClosure@@6B@ ??_7GenerationBlockSizeClosure@@6B@ ??_7GenerationBlockStartClosure@@6B@ ??_7GenerationCounters@@6B@ ??_7GenerationIsInClosure@@6B@ ??_7GenerationIsInReservedClosure@@6B@ ??_7GenerationObjIterateClosure@@6B@ ??_7GenerationOopIterateClosure@@6B@ ??_7GenerationPool@@6B@ ??_7GenerationSafeObjIterateClosure@@6B@ ??_7GenerationSizer@@6B@ ??_7GenerationSpec@@6B@ ??_7GenerationUsedHelper@@6B@ ??_7GetAndAddINode@@6B@ ??_7GetAndAddLNode@@6B@ ??_7GetAndSetINode@@6B@ ??_7GetAndSetLNode@@6B@ ??_7GetAndSetNNode@@6B@ ??_7GetAndSetPNode@@6B@ ??_7GetRSThreadVTimeClosure@@6B@ ??_7GlobalValueNumbering@@6B@ ??_7Goto@@6B@ ??_7GotoNode@@6B@ ??_7GraphKit@@6B@ ??_7GrowableElement@@6B@ ??_7GuardedMemory@@6B@ ??_7HRRSStatsIter@@6B@ ??_7HRSMtSafeChecker@@6B@ ??_7HaltNode@@6B@ ??_7HasAccumulatedModifiedOopsClosure@@6B@ ??_7HeapDumpDCmd@@6B@ ??_7HeapObjectDumper@@6B@ ??_7HeapRegion@@6B@ ??_7HeapRegionClosure@@6B@ ??_7HeapRegionDCTOC@@6B@ ??_7HeapRegionGatheringOopClosure@G1CodeBlobClosure@@6B@ ??_7HeapRegionSet@@6B@ ??_7HeapRegionSetBase@@6B@ ??_7HelpDCmd@@6B@ ??_7HighResTimeSampler@@6B@ ??_7HistoClosure@@6B@ ??_7HumongousReclaimCandidates@G1CollectedHeap@@6B@ ??_7HumongousRegionSetMtSafeChecker@@6B@ ??_7ICStubInterface@@6B@ ??_7ICacheStubGenerator@@6B@ ??_7IdleGCTask@@6B@ ??_7If@@6B@ ??_7IfFalseNode@@6B@ ??_7IfInstanceOf@@6B@ ??_7IfNode@@6B@ ??_7IfOp@@6B@ ??_7IfTrueNode@@6B@ ??_7IllegalType@@6B@ ??_7ImmutableSpace@@6B@ ??_7ImplicitNullCheckStub@@6B@ ??_7InflatedMonitorsClosure@@6B@ ??_7InitializeNode@@6B@ ??_7InlineCallGenerator@@6B@ ??_7InstanceClassLoaderKlass@@6B@ ??_7InstanceConstant@@6B@ ??_7InstanceKlass@@6B@ ??_7InstanceMirrorKlass@@6B@ ??_7InstanceOf@@6B@ ??_7InstanceRefKlass@@6B@ ??_7InstanceType@@6B@ ??_7Instruction@@6B@ ??_7InstructionVisitor@@6B@ ??_7IntConstant@@6B@ ??_7IntType@@6B@ ??_7InterfaceVisiterClosure@@6B@ ??_7InterpretedArgumentOopFinder@@6B@ ??_7InterpretedRFrame@@6B@ ??_7InterpreterCodeletInterface@@6B@ ??_7InterpreterFrameClosure@@6B@ ??_7InterpreterMacroAssembler@@6B@ ??_7IntervalWalker@@6B@ ??_7Intrinsic@@6B@ ??_7Invoke@@6B@ ??_7IsAliveClosure@DefNewGeneration@@6B@ ??_7IsAliveClosure@MarkSweep@@6B@ ??_7IsAliveClosure@PSParallelCompact@@6B@ ??_7IterateObjectClosureRegionClosure@@6B@ ??_7IterateOopClosureRegionClosure@@6B@ ??_7IterateOverHeapObjectClosure@@6B@ ??_7IterateThroughHeapObjectClosure@@6B@ ??_7JMXStartLocalDCmd@@6B@ ??_7JMXStartRemoteDCmd@@6B@ ??_7JMXStopRemoteDCmd@@6B@ ??_7JNIGlobalsDumper@@6B@ ??_7JNILocalRootsClosure@@6B@ ??_7JNILocalsDumper@@6B@ ??_7JNI_ArgumentPusher@@6B@ ??_7JNI_ArgumentPusherArray@@6B@ ??_7JNI_ArgumentPusherVaArg@@6B@ ??_7JProjNode@@6B@ ??_7JavaThread@@6B@ ??_7JniPeriodicCheckerTask@@6B@ ??_7JumpData@@6B@ ??_7JumpNode@@6B@ ??_7JumpProjNode@@6B@ ??_7JvmtiAgentThread@@6B@ ??_7JvmtiBreakpoint@@6B@ ??_7JvmtiDynamicCodeEventCollector@@6B@ ??_7JvmtiEventCollector@@6B@ ??_7JvmtiMonitorClosure@@6B@ ??_7JvmtiTagHashmapEntryClosure@@6B@ ??_7JvmtiVMObjectAllocEventCollector@@6B@ ??_7KeepAliveClosure@@6B@ ??_7KeepAliveClosure@DefNewGeneration@@6B@ ??_7KeepAliveClosure@MarkSweep@@6B@ ??_7Klass@@6B@ ??_7KlassClosure@@6B@ ??_7KlassDepChange@@6B@ ??_7KlassInfoClosure@@6B@ ??_7KlassScanClosure@@6B@ ??_7KlassStream@@6B@ ??_7KlassToOopClosure@@6B@ ??_7KnownGarbageClosure@@6B@ ??_7LIR_Address@@6B@ ??_7LIR_Const@@6B@ ??_7LIR_Op0@@6B@ ??_7LIR_Op1@@6B@ ??_7LIR_Op2@@6B@ ??_7LIR_Op3@@6B@ ??_7LIR_Op@@6B@ ??_7LIR_OpAllocArray@@6B@ ??_7LIR_OpAllocObj@@6B@ ??_7LIR_OpArrayCopy@@6B@ ??_7LIR_OpBranch@@6B@ ??_7LIR_OpCall@@6B@ ??_7LIR_OpCompareAndSwap@@6B@ ??_7LIR_OpConvert@@6B@ ??_7LIR_OpJavaCall@@6B@ ??_7LIR_OpLabel@@6B@ ??_7LIR_OpLock@@6B@ ??_7LIR_OpProfileCall@@6B@ ??_7LIR_OpProfileType@@6B@ ??_7LIR_OpRTCall@@6B@ ??_7LIR_OpRoundFP@@6B@ ??_7LIR_OpTypeCheck@@6B@ ??_7LIR_OpUpdateCRC32@@6B@ ??_7LIR_OprPtr@@6B@ ??_7LRUCurrentHeapPolicy@@6B@ ??_7LRUMaxHeapPolicy@@6B@ ??_7LShiftCntVNode@@6B@ ??_7LShiftINode@@6B@ ??_7LShiftLNode@@6B@ ??_7LShiftVBNode@@6B@ ??_7LShiftVINode@@6B@ ??_7LShiftVLNode@@6B@ ??_7LShiftVSNode@@6B@ ??_7LateInlineBoxingCallGenerator@@6B@ ??_7LateInlineCallGenerator@@6B@ ??_7LateInlineMHCallGenerator@@6B@ ??_7LateInlineStringCallGenerator@@6B@ ??_7LazyClassPathEntry@@6B@ ??_7LibraryCallKit@@6B@ ??_7LibraryIntrinsic@@6B@ ??_7LinearScanWalker@@6B@ ??_7LoadBNode@@6B@ ??_7LoadDNode@@6B@ ??_7LoadD_unalignedNode@@6B@ ??_7LoadFNode@@6B@ ??_7LoadFenceNode@@6B@ ??_7LoadField@@6B@ ??_7LoadINode@@6B@ ??_7LoadIndexed@@6B@ ??_7LoadKlassNode@@6B@ ??_7LoadLNode@@6B@ ??_7LoadL_unalignedNode@@6B@ ??_7LoadNKlassNode@@6B@ ??_7LoadNNode@@6B@ ??_7LoadNode@@6B@ ??_7LoadPLockedNode@@6B@ ??_7LoadPNode@@6B@ ??_7LoadRangeNode@@6B@ ??_7LoadSNode@@6B@ ??_7LoadStoreConditionalNode@@6B@ ??_7LoadStoreNode@@6B@ ??_7LoadUBNode@@6B@ ??_7LoadUSNode@@6B@ ??_7LoadVectorNode@@6B@ ??_7LoadedClassesClosure@@6B@ ??_7Local@@6B@ ??_7LocationValue@@6B@ ??_7LockNode@@6B@ ??_7Log10DNode@@6B@ ??_7LogDNode@@6B@ ??_7LogicOp@@6B@ ??_7LongConstant@@6B@ ??_7LongType@@6B@ ??_7LookupSwitch@@6B@ ??_7LoopLimitNode@@6B@ ??_7LoopNode@@6B@ ??_7MSCMemoryManager@@6B@ ??_7MachBranchNode@@6B@ ??_7MachBreakpointNode@@6B@ ??_7MachCallDynamicJavaNode@@6B@ ??_7MachCallJavaNode@@6B@ ??_7MachCallLeafNode@@6B@ ??_7MachCallNode@@6B@ ??_7MachCallRuntimeNode@@6B@ ??_7MachCallStaticJavaNode@@6B@ ??_7MachConstantBaseNode@@6B@ ??_7MachConstantNode@@6B@ ??_7MachEpilogNode@@6B@ ??_7MachFastLockNode@@6B@ ??_7MachGotoNode@@6B@ ??_7MachHaltNode@@6B@ ??_7MachIdealNode@@6B@ ??_7MachIfNode@@6B@ ??_7MachMergeNode@@6B@ ??_7MachNode@@6B@ ??_7MachNopNode@@6B@ ??_7MachNullCheckNode@@6B@ ??_7MachOper@@6B@ ??_7MachProjNode@@6B@ ??_7MachPrologNode@@6B@ ??_7MachReturnNode@@6B@ ??_7MachSafePointNode@@6B@ ??_7MachSpillCopyNode@@6B@ ??_7MachTempNode@@6B@ ??_7MachTypeNode@@6B@ ??_7MachUEPNode@@6B@ ??_7MacroAssembler@@6B@ ??_7MallocAllocationSiteWalker@@6B@ ??_7MallocSiteWalker@@6B@ ??_7MarkActivationClosure@@6B@ ??_7MarkAndPushClosure@MarkSweep@@6B@ ??_7MarkAndPushClosure@PSParallelCompact@@6B@ ??_7MarkFromDirtyCardsClosure@@6B@ ??_7MarkFromRootsClosure@@6B@ ??_7MarkFromRootsTask@@6B@ ??_7MarkFromRootsVerifyClosure@@6B@ ??_7MarkRefsIntoAndScanClosure@@6B@ ??_7MarkRefsIntoClosure@@6B@ ??_7MarkRefsIntoVerifyClosure@@6B@ ??_7MarkSweepPolicy@@6B@ ??_7MarkingCodeBlobClosure@@6B@ ??_7MaskFillerForNative@@6B@ ??_7MasterFreeRegionListMtSafeChecker@@6B@ ??_7Matcher@@6B@ ??_7MaxINode@@6B@ ??_7MaxNode@@6B@ ??_7MemBar@@6B@ ??_7MemBarAcquireLockNode@@6B@ ??_7MemBarAcquireNode@@6B@ ??_7MemBarCPUOrderNode@@6B@ ??_7MemBarNode@@6B@ ??_7MemBarReleaseLockNode@@6B@ ??_7MemBarReleaseNode@@6B@ ??_7MemBarStoreStoreNode@@6B@ ??_7MemBarVolatileNode@@6B@ ??_7MemDetailDiffReporter@@6B@ ??_7MemDetailReporter@@6B@ ??_7MemNode@@6B@ ??_7MemRegionClosure@@6B@ ??_7MemRegionClosureRO@@6B@ ??_7MemSummaryDiffReporter@@6B@ ??_7MemSummaryReporter@@6B@ ??_7MemoryManager@@6B@ ??_7MemoryPool@@6B@ ??_7MergeMemNode@@6B@ ??_7Metadata@@6B@ ??_7MetadataAwareOopClosure@@6B@ ??_7MetadataAwareOopsInGenClosure@@6B@ ??_7MetadataType@@6B@ ??_7MetaspaceMemoryManager@@6B@ ??_7MetaspacePool@@6B@ ??_7Method@@6B@ ??_7MethodConstant@@6B@ ??_7MethodData@@6B@ ??_7MethodHandlesAdapterBlob@@6B@ ??_7MethodHandlesAdapterGenerator@@6B@ ??_7MethodMatcher@@6B@ ??_7MethodStream@@6B@ ??_7MethodType@@6B@ ??_7MinINode@@6B@ ??_7ModDNode@@6B@ ??_7ModFNode@@6B@ ??_7ModINode@@6B@ ??_7ModLNode@@6B@ ??_7ModRefBarrierSet@@6B@ ??_7ModUnionClosure@@6B@ ??_7ModUnionClosurePar@@6B@ ??_7MonitorAccessStub@@6B@ ??_7MonitorClosure@@6B@ ??_7MonitorEnter@@6B@ ??_7MonitorEnterStub@@6B@ ??_7MonitorExit@@6B@ ??_7MonitorExitStub@@6B@ ??_7MonitorUsedDumper@@6B@ ??_7MoveAndUpdateClosure@@6B@ ??_7MoveD2LNode@@6B@ ??_7MoveD2L_reg_regNode@@6B@ ??_7MoveD2L_reg_stackNode@@6B@ ??_7MoveD2L_stack_regNode@@6B@ ??_7MoveF2INode@@6B@ ??_7MoveF2I_reg_regNode@@6B@ ??_7MoveF2I_reg_stackNode@@6B@ ??_7MoveF2I_stack_regNode@@6B@ ??_7MoveI2FNode@@6B@ ??_7MoveI2F_reg_regNode@@6B@ ??_7MoveI2F_reg_stackNode@@6B@ ??_7MoveI2F_stack_regNode@@6B@ ??_7MoveL2DNode@@6B@ ??_7MoveL2D_reg_regNode@@6B@ ??_7MoveL2D_reg_stackNode@@6B@ ??_7MoveL2D_stack_regNode@@6B@ ??_7MoveL2D_stack_reg_partialNode@@6B@ ??_7MulDNode@@6B@ ??_7MulFNode@@6B@ ??_7MulHiLNode@@6B@ ??_7MulINode@@6B@ ??_7MulLNode@@6B@ ??_7MulNode@@6B@ ??_7MulVDNode@@6B@ ??_7MulVFNode@@6B@ ??_7MulVINode@@6B@ ??_7MulVSNode@@6B@ ??_7MultiBranchData@@6B@ ??_7MultiBranchNode@@6B@ ??_7MultiNode@@6B@ ??_7MutableNUMASpace@@6B@ ??_7MutableSpace@@6B@ ??_7MutableSpaceMangler@@6B@ ??_7MutableSpaceUsedHelper@@6B@ ??_7MutatorAllocRegion@@6B@ ??_7NMTDCmd@@6B@ ??_7NamedThread@@6B@ ??_7NativeSignatureIterator@@6B@ ??_7NegDNode@@6B@ ??_7NegFNode@@6B@ ??_7NegNode@@6B@ ??_7NegateOp@@6B@ ??_7NeverBranchNode@@6B@ ??_7NewArray@@6B@ ??_7NewInstance@@6B@ ??_7NewInstanceStub@@6B@ ??_7NewMultiArray@@6B@ ??_7NewObjectArray@@6B@ ??_7NewObjectArrayStub@@6B@ ??_7NewTypeArray@@6B@ ??_7NewTypeArrayStub@@6B@ ??_7NoHeaderExtendedOopClosure@@6B@ ??_7NoYoungRegionsClosure@@6B@ ??_7Node@@6B@ ??_7NonStaticFieldFiller@@6B@ ??_7NonTieredCompPolicy@@6B@ ??_7NoopGCTask@@6B@ ??_7NoteStartOfMarkHRClosure@@6B@ ??_7NullCheck@@6B@ ??_7NullCheckEliminator@@6B@ ??_7NullCheckVisitor@@6B@ ??_7NullDecoder@@6B@ ??_7NumberSeq@@6B@ ??_7ObjArrayKlass@@6B@ ??_7ObjPtrQueue@@6B@ ??_7ObjectClosure@@6B@ ??_7ObjectClosureCareful@@6B@ ??_7ObjectConstant@@6B@ ??_7ObjectCountEventSenderClosure@@6B@ ??_7ObjectToOopClosure@@6B@ ??_7ObjectType@@6B@ ??_7ObjectValue@@6B@ ??_7OffsetClosure@@6B@ ??_7OffsetTableContigSpace@@6B@ ??_7OldGCAllocRegion@@6B@ ??_7OldGCTracer@@6B@ ??_7OldRegionSetMtSafeChecker@@6B@ ??_7OldToYoungRootsTask@@6B@ ??_7OneContigSpaceCardGeneration@@6B@ ??_7OopClosure@@6B@ ??_7OopMapForCacheEntry@@6B@ ??_7OopsInGenClosure@@6B@ ??_7OopsInHeapRegionClosure@@6B@ ??_7OopsInKlassOrGenClosure@@6B@ ??_7Op2@@6B@ ??_7Opaque1Node@@6B@ ??_7Opaque2Node@@6B@ ??_7Opaque3Node@@6B@ ??_7OrINode@@6B@ ??_7OrLNode@@6B@ ??_7OrVNode@@6B@ ??_7OsrEntry@@6B@ ??_7OverflowAddINode@@6B@ ??_7OverflowAddLNode@@6B@ ??_7OverflowINode@@6B@ ??_7OverflowLNode@@6B@ ??_7OverflowMulINode@@6B@ ??_7OverflowMulLNode@@6B@ ??_7OverflowNode@@6B@ ??_7OverflowSubINode@@6B@ ??_7OverflowSubLNode@@6B@ ??_7PCTableNode@@6B@ ??_7PSAdaptiveSizePolicy@@6B@ ??_7PSAlwaysTrueClosure@@6B@ ??_7PSEvacuateFollowersClosure@@6B@ ??_7PSGCAdaptivePolicyCounters@@6B@ ??_7PSGenerationCounters@@6B@ ??_7PSGenerationPool@@6B@ ??_7PSHeapSummary@@6B@ ??_7PSIsAliveClosure@@6B@ ??_7PSKeepAliveClosure@@6B@ ??_7PSMarkSweepMemoryManager@@6B@ ??_7PSOldGen@@6B@ ??_7PSOldPromotionLAB@@6B@ ??_7PSPromotionFailedClosure@@6B@ ??_7PSPromotionLAB@@6B@ ??_7PSRefEnqueueTaskProxy@@6B@ ??_7PSRefProcTaskExecutor@@6B@ ??_7PSRefProcTaskProxy@@6B@ ??_7PSScavengeFromKlassClosure@@6B@ ??_7PSScavengeKlassClosure@@6B@ ??_7PSScavengeMemoryManager@@6B@ ??_7PSVirtualSpace@@6B@ ??_7PSVirtualSpaceHighToLow@@6B@ ??_7PSYoungGen@@6B@ ??_7PSYoungPromotionLAB@@6B@ ??_7Pack2DNode@@6B@ ??_7Pack2LNode@@6B@ ??_7PackBNode@@6B@ ??_7PackDNode@@6B@ ??_7PackFNode@@6B@ ??_7PackINode@@6B@ ??_7PackLNode@@6B@ ??_7PackNode@@6B@ ??_7PackSNode@@6B@ ??_7ParEvacuateFollowersClosure@@6B@ ??_7ParGCAllocBuffer@@6B@ ??_7ParGCAllocBufferWithBOT@@6B@ ??_7ParKeepAliveClosure@@6B@ ??_7ParKnownGarbageHRClosure@@6B@ ??_7ParKnownGarbageTask@@6B@ ??_7ParMarkBitMapClosure@@6B@ ??_7ParNewGenTask@@6B@ ??_7ParNewGeneration@@6B@ ??_7ParNewMemoryManager@@6B@ ??_7ParNewRefEnqueueTaskProxy@@6B@ ??_7ParNewRefProcTaskExecutor@@6B@ ??_7ParNewRefProcTaskProxy@@6B@ ??_7ParNewTracer@@6B@ ??_7ParRebuildRSTask@@6B@ ??_7ParRootScanWithBarrierTwoGensClosure@@6B@ ??_7ParRootScanWithoutBarrierClosure@@6B@ ??_7ParScanClosure@@6B@ ??_7ParScanWeakRefClosure@@6B@ ??_7ParScanWithBarrierClosure@@6B@ ??_7ParScanWithoutBarrierClosure@@6B@ ??_7Par_ConcMarkingClosure@@6B@ ??_7Par_MarkFromRootsClosure@@6B@ ??_7Par_MarkRefsIntoAndScanClosure@@6B@ ??_7Par_MarkRefsIntoClosure@@6B@ ??_7Par_PushAndMarkClosure@@6B@ ??_7Par_PushOrMarkClosure@@6B@ ??_7ParallelOldTracer@@6B@ ??_7ParallelScavengeHeap@@6B@ ??_7ParallelScavengeTracer@@6B@ ??_7ParallelTaskTerminator@@6B@ ??_7ParametersTypeData@@6B@ ??_7ParmNode@@6B@ ??_7Parse@@6B@ ??_7ParseGenerator@@6B@ ??_7PartialSubtypeCheckNode@@6B@ ??_7PatchingStub@@6B@ ??_7PausePhase@@6B@ ??_7PerfByteArray@@6B@ ??_7PerfData@@6B@ ??_7PerfLong@@6B@ ??_7PerfLongConstant@@6B@ ??_7PerfLongCounter@@6B@ ??_7PerfLongSampleHelper@@6B@ ??_7PerfLongVariable@@6B@ ??_7PerfLongVariant@@6B@ ??_7PerfString@@6B@ ??_7PerfStringConstant@@6B@ ??_7PerfStringVariable@@6B@ ??_7PeriodicTask@@6B@ ??_7PhaseAggressiveCoalesce@@6B@ ??_7PhaseCCP@@6B@ ??_7PhaseChaitin@@6B@ ??_7PhaseCoalesce@@6B@ ??_7PhaseConservativeCoalesce@@6B@ ??_7PhaseGVN@@6B@ ??_7PhaseIdealLoop@@6B@ ??_7PhaseIterGVN@@6B@ ??_7PhasePeephole@@6B@ ??_7PhaseRegAlloc@@6B@ ??_7PhaseSender@@6B@ ??_7PhaseTransform@@6B@ ??_7PhaseValues@@6B@ ??_7PhaseVisitor@@6B@ ??_7Phi@@6B@ ??_7PhiNode@@6B@ ??_7PhiSimplifier@@6B@ ??_7PointsIntoHRDetectionClosure@CleanCallback@@6B@ ??_7PopCountINode@@6B@ ??_7PopCountLNode@@6B@ ??_7PostCompactionPrinterClosure@@6B@ ??_7PostMCRemSetClearClosure@@6B@ ??_7PowDNode@@6B@ ??_7PrecleanKlassClosure@@6B@ ??_7PredicateFailedStub@@6B@ ??_7PredicatedIntrinsicGenerator@@6B@ ??_7PredictedCallGenerator@@6B@ ??_7PrefetchAllocationNode@@6B@ ??_7PrefetchReadNode@@6B@ ??_7PrefetchWriteNode@@6B@ ??_7PrintRegionClosure@@6B@ ??_7PrintSystemPropertiesDCmd@@6B@ ??_7PrintVMFlagsDCmd@@6B@ ??_7PrintValueVisitor@@6B@ ??_7ProcessTask@AbstractRefProcTaskExecutor@@6B@ ??_7ProfileBooleanNode@@6B@ ??_7ProfileCall@@6B@ ??_7ProfileData@@6B@ ??_7ProfileInvoke@@6B@ ??_7ProfileReturnType@@6B@ ??_7ProfilerNode@@6B@ ??_7ProjNode@@6B@ ??_7PromotionFailedInfo@@6B@ ??_7PseudoScopeMark@@6B@ ??_7PtrQueue@@6B@ ??_7PtrQueueSet@@6B@ ??_7PushAndMarkClosure@@6B@ ??_7PushAndMarkVerifyClosure@@6B@ ??_7PushOrMarkClosure@@6B@ ??_7RFrame@@6B@ ??_7RShiftCntVNode@@6B@ ??_7RShiftINode@@6B@ ??_7RShiftLNode@@6B@ ??_7RShiftVBNode@@6B@ ??_7RShiftVINode@@6B@ ??_7RShiftVLNode@@6B@ ??_7RShiftVSNode@@6B@ ??_7RTMLockingCalculationTask@@6B@ ??_7RangeCheckPredicate@@6B@ ??_7RangeCheckStub@@6B@ ??_7ReadClosure@@6B@ ??_7RebuildRSOutOfRegionClosure@@6B@ ??_7RebuildRegionSetsClosure@@6B@ ??_7RebuildStrongCodeRootClosure@@6B@ ??_7ReceiverTypeData@@6B@ ??_7RecordInstanceClosure@@6B@ ??_7RedirtyLoggedCardTableEntryClosure@@6B@ ??_7RefEnqueueTaskProxy@@6B@ ??_7RefProcEnqueueTask@@6B@ ??_7RefProcPhase1Task@@6B@ ??_7RefProcPhase2Task@@6B@ ??_7RefProcPhase3Task@@6B@ ??_7RefProcTaskExecutor@@6B@ ??_7RefProcTaskProxy@@6B@ ??_7ReferencePolicy@@6B@ ??_7RefineCardTableEntryClosure@@6B@ ??_7RefineRecordRefsIntoCSCardTableEntryClosure@@6B@ ??_7RegionNode@@6B@ ??_7RegisterHumongousWithInCSetFastTestClosure@@6B@ ??_7RegisterNMethodOopClosure@@6B@ ??_7ReleaseJavaMonitorsClosure@@6B@ ??_7RelocCallback@@6B@ ??_7Relocation@@6B@ ??_7RelocatorListener@@6B@ ??_7RemarkKlassClosure@@6B@ ??_7RemoveForwardPointerClosure@@6B@ ??_7RemoveSelfForwardPtrHRClosure@@6B@ ??_7RemoveSelfForwardPtrObjClosure@@6B@ ??_7Repl16BNode@@6B@ ??_7Repl16B_immNode@@6B@ ??_7Repl16B_zeroNode@@6B@ ??_7Repl16SNode@@6B@ ??_7Repl16S_immNode@@6B@ ??_7Repl16S_zeroNode@@6B@ ??_7Repl2DNode@@6B@ ??_7Repl2D_zeroNode@@6B@ ??_7Repl2FNode@@6B@ ??_7Repl2F_zeroNode@@6B@ ??_7Repl2INode@@6B@ ??_7Repl2I_immNode@@6B@ ??_7Repl2I_memNode@@6B@ ??_7Repl2I_zeroNode@@6B@ ??_7Repl2LNode@@6B@ ??_7Repl2L_immNode@@6B@ ??_7Repl2L_memNode@@6B@ ??_7Repl2L_zeroNode@@6B@ ??_7Repl2SNode@@6B@ ??_7Repl2S_immNode@@6B@ ??_7Repl2S_zeroNode@@6B@ ??_7Repl32BNode@@6B@ ??_7Repl32B_immNode@@6B@ ??_7Repl32B_zeroNode@@6B@ ??_7Repl4BNode@@6B@ ??_7Repl4B_immNode@@6B@ ??_7Repl4B_zeroNode@@6B@ ??_7Repl4DNode@@6B@ ??_7Repl4D_zeroNode@@6B@ ??_7Repl4FNode@@6B@ ??_7Repl4F_zeroNode@@6B@ ??_7Repl4INode@@6B@ ??_7Repl4I_immNode@@6B@ ??_7Repl4I_memNode@@6B@ ??_7Repl4I_zeroNode@@6B@ ??_7Repl4LNode@@6B@ ??_7Repl4L_immNode@@6B@ ??_7Repl4L_memNode@@6B@ ??_7Repl4L_zeroNode@@6B@ ??_7Repl4SNode@@6B@ ??_7Repl4S_immNode@@6B@ ??_7Repl4S_zeroNode@@6B@ ??_7Repl8BNode@@6B@ ??_7Repl8B_immNode@@6B@ ??_7Repl8B_zeroNode@@6B@ ??_7Repl8FNode@@6B@ ??_7Repl8F_zeroNode@@6B@ ??_7Repl8INode@@6B@ ??_7Repl8I_immNode@@6B@ ??_7Repl8I_memNode@@6B@ ??_7Repl8I_zeroNode@@6B@ ??_7Repl8SNode@@6B@ ??_7Repl8S_immNode@@6B@ ??_7Repl8S_zeroNode@@6B@ ??_7ReplicateBNode@@6B@ ??_7ReplicateDNode@@6B@ ??_7ReplicateFNode@@6B@ ??_7ReplicateINode@@6B@ ??_7ReplicateLNode@@6B@ ??_7ReplicateSNode@@6B@ ??_7ResetClaimValuesClosure@@6B@ ??_7ResolveOopMapConflicts@@6B@ ??_7RestoreMarksClosure@@6B@ ??_7ResultTypeFinder@@6B@ ??_7RetData@@6B@ ??_7RetNode@@6B@ ??_7RethrowExceptionNode@@6B@ ??_7RethrowNode@@6B@ ??_7Return@@6B@ ??_7ReturnNode@@6B@ ??_7ReverseBytesINode@@6B@ ??_7ReverseBytesLNode@@6B@ ??_7ReverseBytesSNode@@6B@ ??_7ReverseBytesUSNode@@6B@ ??_7RootNode@@6B@ ??_7RotateGCLogDCmd@@6B@ ??_7RoundDoubleNode@@6B@ ??_7RoundFP@@6B@ ??_7RoundFloatNode@@6B@ ??_7RunFinalizationDCmd@@6B@ ??_7RuntimeCall@@6B@ ??_7RuntimeStub@@6B@ ??_7SATBBufferClosure@@6B@ ??_7SATBMarkQueueSet@@6B@ ??_7SCMemProjNode@@6B@ ??_7STWGCTimer@@6B@ ??_7SafePointNode@@6B@ ??_7SafePointScalarObjectNode@@6B@ ??_7SafepointBlob@@6B@ ??_7ScanClosure@@6B@ ??_7ScanClosureWithParBarrier@@6B@ ??_7ScanMarkedObjectsAgainCarefullyClosure@@6B@ ??_7ScanMarkedObjectsAgainClosure@@6B@ ??_7ScanRSClosure@@6B@ ??_7ScanWeakRefClosure@@6B@ ??_7ScavengeRootsTask@@6B@ ??_7ScopeValue@@6B@ ??_7ScrubRSClosure@@6B@ ??_7SecondaryFreeRegionListMtSafeChecker@@6B@ ??_7SerialOldTracer@@6B@ ??_7SerializeClosure@@6B@ ??_7ServiceThread@@6B@ ??_7Set@@6B@ ??_7SetHotnessClosure@@6B@ ??_7SetI_@@6B@ ??_7SetupItableClosure@@6B@ ??_7SharedHeap@@6B@ ??_7SharedPathsMiscInfo@@6B@ ??_7ShiftOp@@6B@ ??_7ShortLoopOptimizer@@6B@ ??_7ShouldNotReachHereNode@@6B@ ??_7SignatureChekker@@6B@ ??_7SignatureHandlerGenerator@InterpreterRuntime@@6B@ ??_7SignatureInfo@@6B@ ??_7SignatureIterator@@6B@ ??_7SignatureTypeNames@@6B@ ??_7SignatureTypePrinter@@6B@ ??_7SimpleCompPolicy@@6B@ ??_7SimpleExceptionStub@@6B@ ??_7SimpleRootsClosure@@6B@ ??_7SimpleThresholdPolicy@@6B@ ??_7SinDNode@@6B@ ??_7SingletonBlob@@6B@ ??_7SlowSignatureHandler@@6B@ ??_7Space@@6B@ ??_7SpaceClosure@@6B@ ??_7SpaceClosureRegionClosure@@6B@ ??_7SpaceMangler@@6B@ ??_7SpeculativeTrapData@@6B@ ??_7SqrtDNode@@6B@ ??_7StackWalkCompPolicy@@6B@ ??_7StartNode@@6B@ ??_7StartOSRNode@@6B@ ??_7StatSamplerTask@@6B@ ??_7StateRestorer@@6B@ ??_7StateSplit@@6B@ ??_7StaticFinalFieldPrinter@@6B@ ??_7StatisticsWalker@@6B@ ??_7StealMarkingTask@@6B@ ??_7StealRegionCompactionTask@@6B@ ??_7StealTask@@6B@ ??_7StickyClassDumper@@6B@ ??_7StoreBNode@@6B@ ??_7StoreCMNode@@6B@ ??_7StoreCNode@@6B@ ??_7StoreDNode@@6B@ ??_7StoreFNode@@6B@ ??_7StoreFenceNode@@6B@ ??_7StoreField@@6B@ ??_7StoreINode@@6B@ ??_7StoreIndexed@@6B@ ??_7StoreLConditionalNode@@6B@ ??_7StoreLNode@@6B@ ??_7StoreNKlassNode@@6B@ ??_7StoreNNode@@6B@ ??_7StoreNode@@6B@ ??_7StorePConditionalNode@@6B@ ??_7StorePNode@@6B@ ??_7StoreVectorNode@@6B@ ??_7StrCompNode@@6B@ ??_7StrEqualsNode@@6B@ ??_7StrIndexOfNode@@6B@ ??_7StrIntrinsicNode@@6B@ ??_7StringEventLog@@6B@ ??_7StubAssembler@@6B@ ??_7StubCodeGenerator@@6B@ ??_7StubGenerator@@6B@ ??_7StubInterface@@6B@ ??_7SubDNode@@6B@ ??_7SubFNode@@6B@ ??_7SubFPNode@@6B@ ??_7SubINode@@6B@ ??_7SubLNode@@6B@ ??_7SubNode@@6B@ ??_7SubVBNode@@6B@ ??_7SubVDNode@@6B@ ??_7SubVFNode@@6B@ ??_7SubVINode@@6B@ ??_7SubVLNode@@6B@ ??_7SubVSNode@@6B@ ??_7SumUsedClosure@@6B@ ??_7SurrogateLockerThread@@6B@ ??_7SurvivorContiguousSpacePool@@6B@ ??_7SurvivorGCAllocRegion@@6B@ ??_7SurvivorMutableSpacePool@@6B@ ??_7SurvivorSpacePrecleanClosure@@6B@ ??_7SweepClosure@@6B@ ??_7Switch@@6B@ ??_7SymbolClosure@@6B@ ??_7SymbolTableDumper@@6B@ ??_7SystemGCDCmd@@6B@ ??_7TableSwitch@@6B@ ??_7TagObjectCollector@@6B@ ??_7TailCallNode@@6B@ ??_7TailCalljmpIndNode@@6B@ ??_7TailJumpNode@@6B@ ??_7TanDNode@@6B@ ??_7TaskQueueSetSuper@@6B@ ??_7TearDownRegionSetsClosure@@6B@ ??_7TenuredGeneration@@6B@ ??_7TenuredSpace@@6B@ ??_7TerminatorTerminator@@6B@ ??_7Thread@@6B@ ??_7ThreadClosure@@6B@ ??_7ThreadDumpDCmd@@6B@ ??_7ThreadLocalNode@@6B@ ??_7ThreadRootsMarkingTask@@6B@ ??_7ThreadRootsTask@@6B@ ??_7ThreadShadow@@6B@ ??_7ThreadTimesClosure@@6B@ ??_7Throw@@6B@ ??_7TimePartitionPhasesIterator@@6B@ ??_7TruncatedSeq@@6B@ ??_7TwoGenerationCollectorPolicy@@6B@ ??_7Type@@6B@ ??_7TypeArrayKlass@@6B@ ??_7TypeAry@@6B@ ??_7TypeAryPtr@@6B@ ??_7TypeCast@@6B@ ??_7TypeCheck@@6B@ ??_7TypeD@@6B@ ??_7TypeF@@6B@ ??_7TypeFunc@@6B@ ??_7TypeInstPtr@@6B@ ??_7TypeInt@@6B@ ??_7TypeKlassPtr@@6B@ ??_7TypeLong@@6B@ ??_7TypeMetadataPtr@@6B@ ??_7TypeNarrowKlass@@6B@ ??_7TypeNarrowOop@@6B@ ??_7TypeNarrowPtr@@6B@ ??_7TypeNode@@6B@ ??_7TypeOopPtr@@6B@ ??_7TypePtr@@6B@ ??_7TypeRawPtr@@6B@ ??_7TypeTuple@@6B@ ??_7TypeVect@@6B@ ??_7TypeVectD@@6B@ ??_7TypeVectS@@6B@ ??_7TypeVectX@@6B@ ??_7TypeVectY@@6B@ ??_7URShiftINode@@6B@ ??_7URShiftLNode@@6B@ ??_7URShiftVBNode@@6B@ ??_7URShiftVINode@@6B@ ??_7URShiftVLNode@@6B@ ??_7URShiftVSNode@@6B@ ??_7UncommonTrapBlob@@6B@ ??_7UncommonTrapCallGenerator@@6B@ ??_7UniverseOper@@6B@ ??_7UnlockNode@@6B@ ??_7UnregisterNMethodOopClosure@@6B@ ??_7UnsafeGetAndSetObject@@6B@ ??_7UnsafeGetObject@@6B@ ??_7UnsafeGetRaw@@6B@ ??_7UnsafeObjectOp@@6B@ ??_7UnsafeOp@@6B@ ??_7UnsafePrefetch@@6B@ ??_7UnsafePrefetchRead@@6B@ ??_7UnsafePrefetchWrite@@6B@ ??_7UnsafePutObject@@6B@ ??_7UnsafePutRaw@@6B@ ??_7UnsafeRawOp@@6B@ ??_7UpdateDensePrefixTask@@6B@ ??_7UpdateOnlyClosure@@6B@ ??_7UpdateRSOopClosure@@6B@ ??_7UpdateRSetDeferred@@6B@ ??_7UpwardsObjectClosure@@6B@ ??_7VMThread@@6B@ ??_7VMUptimeDCmd@@6B@ ??_7VM_BulkRevokeBias@@6B@ ??_7VM_CGC_Operation@@6B@ ??_7VM_CMS_Final_Remark@@6B@ ??_7VM_CMS_Initial_Mark@@6B@ ??_7VM_CMS_Operation@@6B@ ??_7VM_ChangeBreakpoints@@6B@ ??_7VM_ChangeSingleStep@@6B@ ??_7VM_CollectForAllocation@@6B@ ??_7VM_CollectForMetadataAllocation@@6B@ ??_7VM_Deoptimize@@6B@ ??_7VM_DeoptimizeFrame@@6B@ ??_7VM_Dummy@@6B@ ??_7VM_EnableBiasedLocking@@6B@ ??_7VM_EnterInterpOnlyMode@@6B@ ??_7VM_Exit@@6B@ ??_7VM_FindDeadlocks@@6B@ ??_7VM_ForceAsyncSafepoint@@6B@ ??_7VM_ForceSafepoint@@6B@ ??_7VM_G1CollectForAllocation@@6B@ ??_7VM_G1CollectFull@@6B@ ??_7VM_G1IncCollectionPause@@6B@ ??_7VM_G1OperationWithAllocRequest@@6B@ ??_7VM_GC_HeapInspection@@6B@ ??_7VM_GC_Operation@@6B@ ??_7VM_GenCollectForAllocation@@6B@ ??_7VM_GenCollectFull@@6B@ ??_7VM_GenCollectFullConcurrent@@6B@ ??_7VM_GetAllStackTraces@@6B@ ??_7VM_GetCurrentContendedMonitor@@6B@ ??_7VM_GetCurrentLocation@@6B@ ??_7VM_GetFrameCount@@6B@ ??_7VM_GetFrameLocation@@6B@ ??_7VM_GetMultipleStackTraces@@6B@ ??_7VM_GetObjectMonitorUsage@@6B@ ??_7VM_GetOrSetLocal@@6B@ ??_7VM_GetOwnedMonitorInfo@@6B@ ??_7VM_GetReceiver@@6B@ ??_7VM_GetStackTrace@@6B@ ??_7VM_GetThreadListStackTraces@@6B@ ??_7VM_HeapDumper@@6B@ ??_7VM_HeapIterateOperation@@6B@ ??_7VM_HeapWalkOperation@@6B@ ??_7VM_JNIFunctionTableCopier@@6B@ ??_7VM_Operation@@6B@ ??_7VM_ParallelGCFailedAllocation@@6B@ ??_7VM_ParallelGCSystemGC@@6B@ ??_7VM_PopulateDumpSharedSpace@@6B@ ??_7VM_PrintJNI@@6B@ ??_7VM_PrintThreads@@6B@ ??_7VM_RedefineClasses@@6B@ ??_7VM_ReportJavaOutOfMemory@@6B@ ??_7VM_RevokeBias@@6B@ ??_7VM_RotateGCLog@@6B@ ??_7VM_ThreadDump@@6B@ ??_7VM_ThreadStop@@6B@ ??_7VM_Verify@@6B@ ??_7VM_Version_StubGenerator@@6B@ ??_7VM_WhiteBoxCleanMethodData@@6B@ ??_7VM_WhiteBoxOperation@@6B@ ??_7VSetI_@@6B@ ??_7ValueNumberingEffects@@6B@ ??_7ValueNumberingVisitor@@6B@ ??_7ValueType@@6B@ ??_7ValueVisitor@@6B@ ??_7VectorNode@@6B@ ??_7VectorSet@@6B@ ??_7Verification@RangeCheckEliminator@@6B@ ??_7VerifyAllBlksClosure@@6B@ ??_7VerifyAllOopsClosure@@6B@ ??_7VerifyCTGenClosure@@6B@ ??_7VerifyCTSpaceClosure@@6B@ ??_7VerifyCleanCardClosure@@6B@ ??_7VerifyClosure@@6B@ ??_7VerifyFieldClosure@@6B@ ??_7VerifyHandleClosure@@6B@ ??_7VerifyKlassClosure@@6B@ ??_7VerifyKlassOopsClosure@VerifyKlassOopsKlassClosure@@6B@ ??_7VerifyKlassOopsKlassClosure@@6B@ ??_7VerifyLiveClosure@@6B@ ??_7VerifyLiveObjectDataHRClosure@@6B@ ??_7VerifyLivenessOopClosure@@6B@ ??_7VerifyMarkedClosure@@6B@ ??_7VerifyObjectStartArrayClosure@@6B@ ??_7VerifyObjsInRegionClosure@@6B@ ??_7VerifyOopClosure@@6B@ ??_7VerifyOopsClosure@@6B@ ??_7VerifyRegionClosure@@6B@ ??_7VerifyRegionListsClosure@@6B@ ??_7VerifyRegionRemSetClosure@@6B@ ??_7VerifyRemSetClosure@@6B@ ??_7VerifyRootsClosure@@6B@ ??_7VerifyStrongCodeRootCodeBlobClosure@@6B@ ??_7VerifyStrongCodeRootOopClosure@@6B@ ??_7VersionDCmd@@6B@ ??_7VirtualCallData@@6B@ ??_7VirtualCallGenerator@@6B@ ??_7VirtualCallTypeData@@6B@ ??_7VirtualMemoryAllocationWalker@@6B@ ??_7VirtualMemoryWalker@@6B@ ??_7Visitor@RangeCheckEliminator@@6B@ ??_7VmThreadCountClosure@@6B@ ??_7VoidClosure@@6B@ ??_7VoidType@@6B@ ??_7WBIsKlassAliveClosure@@6B@ ??_7WaitForBarrierGCTask@@6B@ ??_7WarmCallGenerator@@6B@ ??_7WatcherThread@@6B@ ??_7Win32AttachOperation@@6B@ ??_7WindowsDecoder@@6B@ ??_7WorkGang@@6B@ ??_7WorkerThread@@6B@ ??_7WriteClosure@@6B@ ??_7XorINode@@6B@ ??_7XorLNode@@6B@ ??_7XorVNode@@6B@ ??_7YieldClosure@@6B@ ??_7YieldingFlexibleGangTask@@6B@ ??_7YieldingFlexibleGangWorker@@6B@ ??_7YieldingFlexibleWorkGang@@6B@ ??_7YoungGCTracer@@6B@ ??_7YoungRefCounterClosure@@6B@ ??_7absD_regNode@@6B@ ??_7absD_reg_regNode@@6B@ ??_7absF_regNode@@6B@ ??_7absF_reg_regNode@@6B@ ??_7adapterNode@@6B@ ??_7addD_immNode@@6B@ ??_7addD_memNode@@6B@ ??_7addD_mem_0Node@@6B@ ??_7addD_regNode@@6B@ ??_7addD_reg_immNode@@6B@ ??_7addD_reg_memNode@@6B@ ??_7addD_reg_mem_0Node@@6B@ ??_7addD_reg_regNode@@6B@ ??_7addF_immNode@@6B@ ??_7addF_memNode@@6B@ ??_7addF_mem_0Node@@6B@ ??_7addF_regNode@@6B@ ??_7addF_reg_immNode@@6B@ ??_7addF_reg_memNode@@6B@ ??_7addF_reg_mem_0Node@@6B@ ??_7addF_reg_regNode@@6B@ ??_7addI_mem_immNode@@6B@ ??_7addI_mem_rRegNode@@6B@ ??_7addI_mem_rReg_0Node@@6B@ ??_7addI_rRegNode@@6B@ ??_7addI_rReg_immNode@@6B@ ??_7addI_rReg_memNode@@6B@ ??_7addI_rReg_mem_0Node@@6B@ ??_7addL_mem_immNode@@6B@ ??_7addL_mem_rRegNode@@6B@ ??_7addL_mem_rReg_0Node@@6B@ ??_7addL_rRegNode@@6B@ ??_7addL_rReg_immNode@@6B@ ??_7addL_rReg_memNode@@6B@ ??_7addL_rReg_mem_0Node@@6B@ ??_7addP_rRegNode@@6B@ ??_7addP_rReg_immNode@@6B@ ??_7andI2L_rReg_imm255Node@@6B@ ??_7andI2L_rReg_imm65535Node@@6B@ ??_7andI_mem_immNode@@6B@ ??_7andI_mem_rRegNode@@6B@ ??_7andI_mem_rReg_0Node@@6B@ ??_7andI_rRegNode@@6B@ ??_7andI_rReg_imm255Node@@6B@ ??_7andI_rReg_imm65535Node@@6B@ ??_7andI_rReg_immNode@@6B@ ??_7andI_rReg_memNode@@6B@ ??_7andI_rReg_mem_0Node@@6B@ ??_7andL_mem_immNode@@6B@ ??_7andL_mem_rRegNode@@6B@ ??_7andL_mem_rReg_0Node@@6B@ ??_7andL_rRegNode@@6B@ ??_7andL_rReg_imm255Node@@6B@ ??_7andL_rReg_imm65535Node@@6B@ ??_7andL_rReg_immNode@@6B@ ??_7andL_rReg_memNode@@6B@ ??_7andL_rReg_mem_0Node@@6B@ ??_7and_cmpLTMaskNode@@6B@ ??_7and_cmpLTMask_0Node@@6B@ ??_7andnI_rReg_rReg_memNode@@6B@ ??_7andnI_rReg_rReg_mem_0Node@@6B@ ??_7andnI_rReg_rReg_rRegNode@@6B@ ??_7andnI_rReg_rReg_rReg_0Node@@6B@ ??_7andnL_rReg_rReg_memNode@@6B@ ??_7andnL_rReg_rReg_mem_0Node@@6B@ ??_7andnL_rReg_rReg_rRegNode@@6B@ ??_7andnL_rReg_rReg_rReg_0Node@@6B@ ??_7any_RegPOper@@6B@ ??_7array_equalsNode@@6B@ ??_7blsiI_rReg_memNode@@6B@ ??_7blsiI_rReg_mem_0Node@@6B@ ??_7blsiI_rReg_rRegNode@@6B@ ??_7blsiI_rReg_rReg_0Node@@6B@ ??_7blsiL_rReg_memNode@@6B@ ??_7blsiL_rReg_mem_0Node@@6B@ ??_7blsiL_rReg_rRegNode@@6B@ ??_7blsiL_rReg_rReg_0Node@@6B@ ??_7blsmskI_rReg_memNode@@6B@ ??_7blsmskI_rReg_mem_0Node@@6B@ ??_7blsmskI_rReg_rRegNode@@6B@ ??_7blsmskI_rReg_rReg_0Node@@6B@ ??_7blsmskL_rReg_memNode@@6B@ ??_7blsmskL_rReg_mem_0Node@@6B@ ??_7blsmskL_rReg_rRegNode@@6B@ ??_7blsmskL_rReg_rReg_0Node@@6B@ ??_7blsrI_rReg_memNode@@6B@ ??_7blsrI_rReg_mem_0Node@@6B@ ??_7blsrI_rReg_rRegNode@@6B@ ??_7blsrI_rReg_rReg_0Node@@6B@ ??_7blsrL_rReg_memNode@@6B@ ??_7blsrL_rReg_mem_0Node@@6B@ ??_7blsrL_rReg_rRegNode@@6B@ ??_7blsrL_rReg_rReg_0Node@@6B@ ??_7bufferedStream@@6B@ ??_7bytes_reverse_intNode@@6B@ ??_7bytes_reverse_longNode@@6B@ ??_7bytes_reverse_shortNode@@6B@ ??_7bytes_reverse_unsigned_shortNode@@6B@ ??_7cadd_cmpLTMaskNode@@6B@ ??_7cadd_cmpLTMask_0Node@@6B@ ??_7cadd_cmpLTMask_1Node@@6B@ ??_7cadd_cmpLTMask_2Node@@6B@ ??_7castIINode@@6B@ ??_7castP2XNode@@6B@ ??_7castPPNode@@6B@ ??_7castX2PNode@@6B@ ??_7checkCastPPNode@@6B@ ??_7ciArgInfoData@@6B@ ??_7ciArray@@6B@ ??_7ciArrayKlass@@6B@ ??_7ciBaseObject@@6B@ ??_7ciBitData@@6B@ ??_7ciBranchData@@6B@ ??_7ciCallSite@@6B@ ??_7ciCallTypeData@@6B@ ??_7ciCounterData@@6B@ ??_7ciInstance@@6B@ ??_7ciInstanceKlass@@6B@ ??_7ciJumpData@@6B@ ??_7ciKlass@@6B@ ??_7ciMemberName@@6B@ ??_7ciMetadata@@6B@ ??_7ciMethod@@6B@ ??_7ciMethodData@@6B@ ??_7ciMethodHandle@@6B@ ??_7ciMethodType@@6B@ ??_7ciMultiBranchData@@6B@ ??_7ciNullObject@@6B@ ??_7ciObjArray@@6B@ ??_7ciObjArrayKlass@@6B@ ??_7ciObject@@6B@ ??_7ciParametersTypeData@@6B@ ??_7ciReceiverTypeData@@6B@ ??_7ciRetData@@6B@ ??_7ciReturnAddress@@6B@ ??_7ciSpeculativeTrapData@@6B@ ??_7ciSymbol@@6B@ ??_7ciType@@6B@ ??_7ciTypeArray@@6B@ ??_7ciTypeArrayKlass@@6B@ ??_7ciVirtualCallData@@6B@ ??_7ciVirtualCallTypeData@@6B@ ??_7cmovD_regNode@@6B@ ??_7cmovD_regUCFNode@@6B@ ??_7cmovD_regUNode@@6B@ ??_7cmovF_regNode@@6B@ ??_7cmovF_regUCFNode@@6B@ ??_7cmovF_regUNode@@6B@ ??_7cmovI_memNode@@6B@ ??_7cmovI_memUCFNode@@6B@ ??_7cmovI_memUNode@@6B@ ??_7cmovI_regNode@@6B@ ??_7cmovI_regUCFNode@@6B@ ??_7cmovI_regUNode@@6B@ ??_7cmovI_reg_gNode@@6B@ ??_7cmovI_reg_lNode@@6B@ ??_7cmovL_memNode@@6B@ ??_7cmovL_memUCFNode@@6B@ ??_7cmovL_memUNode@@6B@ ??_7cmovL_regNode@@6B@ ??_7cmovL_regUCFNode@@6B@ ??_7cmovL_regUNode@@6B@ ??_7cmovN_regNode@@6B@ ??_7cmovN_regUCFNode@@6B@ ??_7cmovN_regUNode@@6B@ ??_7cmovP_regNode@@6B@ ??_7cmovP_regUCFNode@@6B@ ??_7cmovP_regUNode@@6B@ ??_7cmpD_cc_immCFNode@@6B@ ??_7cmpD_cc_immNode@@6B@ ??_7cmpD_cc_memCFNode@@6B@ ??_7cmpD_cc_memNode@@6B@ ??_7cmpD_cc_regNode@@6B@ ??_7cmpD_cc_reg_CFNode@@6B@ ??_7cmpD_immNode@@6B@ ??_7cmpD_memNode@@6B@ ??_7cmpD_regNode@@6B@ ??_7cmpF_cc_immCFNode@@6B@ ??_7cmpF_cc_immNode@@6B@ ??_7cmpF_cc_memCFNode@@6B@ ??_7cmpF_cc_memNode@@6B@ ??_7cmpF_cc_regNode@@6B@ ??_7cmpF_cc_reg_CFNode@@6B@ ??_7cmpF_immNode@@6B@ ??_7cmpF_memNode@@6B@ ??_7cmpF_regNode@@6B@ ??_7cmpFastLockNode@@6B@ ??_7cmpFastLockRTMNode@@6B@ ??_7cmpFastUnlockNode@@6B@ ??_7cmpL3_reg_regNode@@6B@ ??_7cmpLTMask0Node@@6B@ ??_7cmpLTMaskNode@@6B@ ??_7cmpOpOper@@6B@ ??_7cmpOpUCF2Oper@@6B@ ??_7cmpOpUCFOper@@6B@ ??_7cmpOpUOper@@6B@ ??_7compI_rRegNode@@6B@ ??_7compI_rReg_immNode@@6B@ ??_7compI_rReg_memNode@@6B@ ??_7compL_rRegNode@@6B@ ??_7compL_rReg_immNode@@6B@ ??_7compL_rReg_memNode@@6B@ ??_7compN_mem_immNode@@6B@ ??_7compN_mem_imm_klassNode@@6B@ ??_7compN_rRegNode@@6B@ ??_7compN_rReg_immNode@@6B@ ??_7compN_rReg_imm_klassNode@@6B@ ??_7compN_rReg_memNode@@6B@ ??_7compP_mem_rRegNode@@6B@ ??_7compP_rRegNode@@6B@ ??_7compP_rReg_memNode@@6B@ ??_7compUL_rRegNode@@6B@ ??_7compUL_rReg_immNode@@6B@ ??_7compUL_rReg_memNode@@6B@ ??_7compU_rRegNode@@6B@ ??_7compU_rReg_immNode@@6B@ ??_7compU_rReg_memNode@@6B@ ??_7compareAndSwapINode@@6B@ ??_7compareAndSwapLNode@@6B@ ??_7compareAndSwapNNode@@6B@ ??_7compareAndSwapPNode@@6B@ ??_7compiledNode@@6B@ ??_7compiledVFrame@@6B@ ??_7convD2F_reg_memNode@@6B@ ??_7convD2F_reg_regNode@@6B@ ??_7convD2I_reg_regNode@@6B@ ??_7convD2L_reg_regNode@@6B@ ??_7convF2D_reg_memNode@@6B@ ??_7convF2D_reg_regNode@@6B@ ??_7convF2I_reg_regNode@@6B@ ??_7convF2L_reg_regNode@@6B@ ??_7convI2BNode@@6B@ ??_7convI2D_reg_memNode@@6B@ ??_7convI2D_reg_regNode@@6B@ ??_7convI2F_reg_memNode@@6B@ ??_7convI2F_reg_regNode@@6B@ ??_7convI2L_reg_mem_zexNode@@6B@ ??_7convI2L_reg_regNode@@6B@ ??_7convI2L_reg_reg_zexNode@@6B@ ??_7convL2D_reg_memNode@@6B@ ??_7convL2D_reg_regNode@@6B@ ??_7convL2F_reg_memNode@@6B@ ??_7convL2F_reg_regNode@@6B@ ??_7convL2I_reg_regNode@@6B@ ??_7convN2INode@@6B@ ??_7convP2BNode@@6B@ ??_7convP2INode@@6B@ ??_7convXI2D_regNode@@6B@ ??_7convXI2F_regNode@@6B@ ??_7cosD_regNode@@6B@ ??_7countLeadingZerosINode@@6B@ ??_7countLeadingZerosI_bsrNode@@6B@ ??_7countLeadingZerosLNode@@6B@ ??_7countLeadingZerosL_bsrNode@@6B@ ??_7countTrailingZerosINode@@6B@ ??_7countTrailingZerosI_bsfNode@@6B@ ??_7countTrailingZerosLNode@@6B@ ??_7countTrailingZerosL_bsfNode@@6B@ ??_7decI_memNode@@6B@ ??_7decI_rRegNode@@6B@ ??_7decL_memNode@@6B@ ??_7decL_rRegNode@@6B@ ??_7decodeHeapOopNode@@6B@ ??_7decodeHeapOop_not_nullNode@@6B@ ??_7decodeKlass_not_nullNode@@6B@ ??_7defaultStream@@6B@ ??_7divD_immNode@@6B@ ??_7divD_memNode@@6B@ ??_7divD_regNode@@6B@ ??_7divD_reg_immNode@@6B@ ??_7divD_reg_memNode@@6B@ ??_7divD_reg_regNode@@6B@ ??_7divF_immNode@@6B@ ??_7divF_memNode@@6B@ ??_7divF_regNode@@6B@ ??_7divF_reg_immNode@@6B@ ??_7divF_reg_memNode@@6B@ ??_7divF_reg_regNode@@6B@ ??_7divI_rRegNode@@6B@ ??_7divL_10Node@@6B@ ??_7divL_rRegNode@@6B@ ??_7divModI_rReg_divmodNode@@6B@ ??_7divModL_rReg_divmodNode@@6B@ ??_7encodeHeapOopNode@@6B@ ??_7encodeHeapOop_not_nullNode@@6B@ ??_7encodeKlass_not_nullNode@@6B@ ??_7encode_iso_arrayNode@@6B@ ??_7entryVFrame@@6B@ ??_7expD_regNode@@6B@ ??_7externalVFrame@@6B@ ??_7external_word_Relocation@@6B@ ??_7fdStream@@6B@ ??_7fileStream@@6B@ ??_7gcLogFileStream@@6B@ ??_7i2bNode@@6B@ ??_7i2sNode@@6B@ ??_7immD0Oper@@6B@ ??_7immDOper@@6B@ ??_7immF0Oper@@6B@ ??_7immFOper@@6B@ ??_7immI0Oper@@6B@ ??_7immI16Oper@@6B@ ??_7immI1Oper@@6B@ ??_7immI2Oper@@6B@ ??_7immI8Oper@@6B@ ??_7immIOper@@6B@ ??_7immI_16Oper@@6B@ ??_7immI_24Oper@@6B@ ??_7immI_255Oper@@6B@ ??_7immI_32Oper@@6B@ ??_7immI_64Oper@@6B@ ??_7immI_65535Oper@@6B@ ??_7immI_M1Oper@@6B@ ??_7immL0Oper@@6B@ ??_7immL10Oper@@6B@ ??_7immL1Oper@@6B@ ??_7immL32Oper@@6B@ ??_7immL8Oper@@6B@ ??_7immLOper@@6B@ ??_7immL_127Oper@@6B@ ??_7immL_255Oper@@6B@ ??_7immL_32bitsOper@@6B@ ??_7immL_65535Oper@@6B@ ??_7immL_M1Oper@@6B@ ??_7immN0Oper@@6B@ ??_7immNKlassOper@@6B@ ??_7immNOper@@6B@ ??_7immP0Oper@@6B@ ??_7immP31Oper@@6B@ ??_7immPOper@@6B@ ??_7immU31Oper@@6B@ ??_7immUL32Oper@@6B@ ??_7incI_memNode@@6B@ ??_7incI_rRegNode@@6B@ ??_7incL_memNode@@6B@ ??_7incL_rRegNode@@6B@ ??_7indCompressedOopOffsetOper@@6B@ ??_7indIndexNarrowOper@@6B@ ??_7indIndexOffsetNarrowOper@@6B@ ??_7indIndexOffsetOper@@6B@ ??_7indIndexOper@@6B@ ??_7indIndexScaleNarrowOper@@6B@ ??_7indIndexScaleOffsetNarrowOper@@6B@ ??_7indIndexScaleOffsetOper@@6B@ ??_7indIndexScaleOper@@6B@ ??_7indOffset32NarrowOper@@6B@ ??_7indOffset32Oper@@6B@ ??_7indOffset8NarrowOper@@6B@ ??_7indOffset8Oper@@6B@ ??_7indPosIndexScaleOffsetNarrowOper@@6B@ ??_7indPosIndexScaleOffsetOper@@6B@ ??_7indirectNarrowOper@@6B@ ??_7indirectOper@@6B@ ??_7internal_word_Relocation@@6B@ ??_7interpretedNode@@6B@ ??_7interpretedVFrame@@6B@ ??_7javaVFrame@@6B@ ??_7jmpConNode@@6B@ ??_7jmpConUCF2Node@@6B@ ??_7jmpConUCF2_shortNode@@6B@ ??_7jmpConUCFNode@@6B@ ??_7jmpConUCF_shortNode@@6B@ ??_7jmpConUNode@@6B@ ??_7jmpConU_shortNode@@6B@ ??_7jmpCon_shortNode@@6B@ ??_7jmpDirNode@@6B@ ??_7jmpDir_shortNode@@6B@ ??_7jmpLoopEndNode@@6B@ ??_7jmpLoopEndUCFNode@@6B@ ??_7jmpLoopEndUCF_shortNode@@6B@ ??_7jmpLoopEndUNode@@6B@ ??_7jmpLoopEndU_shortNode@@6B@ ??_7jmpLoopEnd_shortNode@@6B@ ??_7jumpXtndNode@@6B@ ??_7jumpXtnd_addrNode@@6B@ ??_7jumpXtnd_offsetNode@@6B@ ??_7labelOper@@6B@ ??_7leaI_rReg_immINode@@6B@ ??_7leaL_rReg_immLNode@@6B@ ??_7leaP32NarrowNode@@6B@ ??_7leaP32Node@@6B@ ??_7leaP8NarrowNode@@6B@ ??_7leaP8Node@@6B@ ??_7leaPCompressedOopOffsetNode@@6B@ ??_7leaPIdxOffNarrowNode@@6B@ ??_7leaPIdxOffNode@@6B@ ??_7leaPIdxScaleNarrowNode@@6B@ ??_7leaPIdxScaleNode@@6B@ ??_7leaPIdxScaleOffNarrowNode@@6B@ ??_7leaPIdxScaleOffNode@@6B@ ??_7leaPPosIdxScaleOffNarrowNode@@6B@ ??_7leaPPosIdxScaleOffNode@@6B@ ??_7leaP_rReg_immNode@@6B@ ??_7loadB2LNode@@6B@ ??_7loadBNode@@6B@ ??_7loadConD0Node@@6B@ ??_7loadConDNode@@6B@ ??_7loadConF0Node@@6B@ ??_7loadConFNode@@6B@ ??_7loadConI0Node@@6B@ ??_7loadConINode@@6B@ ??_7loadConL0Node@@6B@ ??_7loadConL32Node@@6B@ ??_7loadConLNode@@6B@ ??_7loadConL_0x6666666666666667Node@@6B@ ??_7loadConN0Node@@6B@ ??_7loadConNKlassNode@@6B@ ??_7loadConNNode@@6B@ ??_7loadConP0Node@@6B@ ??_7loadConP31Node@@6B@ ??_7loadConPNode@@6B@ ??_7loadConUL32Node@@6B@ ??_7loadDNode@@6B@ ??_7loadD_partialNode@@6B@ ??_7loadFNode@@6B@ ??_7loadI2BNode@@6B@ ??_7loadI2LNode@@6B@ ??_7loadI2L_immI_255Node@@6B@ ??_7loadI2L_immI_65535Node@@6B@ ??_7loadI2L_immU31Node@@6B@ ??_7loadI2SNode@@6B@ ??_7loadI2UBNode@@6B@ ??_7loadI2USNode@@6B@ ??_7loadINode@@6B@ ??_7loadKlassNode@@6B@ ??_7loadLNode@@6B@ ??_7loadNKlassNode@@6B@ ??_7loadNNode@@6B@ ??_7loadPLockedNode@@6B@ ??_7loadPNode@@6B@ ??_7loadRangeNode@@6B@ ??_7loadS2BNode@@6B@ ??_7loadS2LNode@@6B@ ??_7loadSNode@@6B@ ??_7loadSSDNode@@6B@ ??_7loadSSFNode@@6B@ ??_7loadSSINode@@6B@ ??_7loadSSLNode@@6B@ ??_7loadSSPNode@@6B@ ??_7loadUB2LNode@@6B@ ??_7loadUB2L_immI8Node@@6B@ ??_7loadUBNode@@6B@ ??_7loadUI2LNode@@6B@ ??_7loadUS2BNode@@6B@ ??_7loadUS2LNode@@6B@ ??_7loadUS2L_immI16Node@@6B@ ??_7loadUS2L_immI_255Node@@6B@ ??_7loadUSNode@@6B@ ??_7loadV16Node@@6B@ ??_7loadV32Node@@6B@ ??_7loadV4Node@@6B@ ??_7loadV8Node@@6B@ ??_7log10D_regNode@@6B@ ??_7logD_regNode@@6B@ ??_7maxI_rRegNode@@6B@ ??_7membar_acquireNode@@6B@ ??_7membar_acquire_0Node@@6B@ ??_7membar_acquire_lockNode@@6B@ ??_7membar_releaseNode@@6B@ ??_7membar_release_0Node@@6B@ ??_7membar_release_lockNode@@6B@ ??_7membar_storestoreNode@@6B@ ??_7membar_volatileNode@@6B@ ??_7metadata_Relocation@@6B@ ??_7methodOper@@6B@ ??_7minI_rRegNode@@6B@ ??_7modI_rRegNode@@6B@ ??_7modL_rRegNode@@6B@ ??_7mulD_immNode@@6B@ ??_7mulD_memNode@@6B@ ??_7mulD_mem_0Node@@6B@ ??_7mulD_regNode@@6B@ ??_7mulD_reg_immNode@@6B@ ??_7mulD_reg_memNode@@6B@ ??_7mulD_reg_mem_0Node@@6B@ ??_7mulD_reg_regNode@@6B@ ??_7mulF_immNode@@6B@ ??_7mulF_memNode@@6B@ ??_7mulF_mem_0Node@@6B@ ??_7mulF_regNode@@6B@ ??_7mulF_reg_immNode@@6B@ ??_7mulF_reg_memNode@@6B@ ??_7mulF_reg_mem_0Node@@6B@ ??_7mulF_reg_regNode@@6B@ ??_7mulHiL_rRegNode@@6B@ ??_7mulI_memNode@@6B@ ??_7mulI_mem_0Node@@6B@ ??_7mulI_mem_immNode@@6B@ ??_7mulI_rRegNode@@6B@ ??_7mulI_rReg_immNode@@6B@ ??_7mulL_memNode@@6B@ ??_7mulL_mem_0Node@@6B@ ??_7mulL_mem_immNode@@6B@ ??_7mulL_rRegNode@@6B@ ??_7mulL_rReg_immNode@@6B@ ??_7mul_hiNode@@6B@ ??_7negD_regNode@@6B@ ??_7negD_reg_regNode@@6B@ ??_7negF_regNode@@6B@ ??_7negF_reg_regNode@@6B@ ??_7negI_memNode@@6B@ ??_7negI_rRegNode@@6B@ ??_7negL_memNode@@6B@ ??_7negL_rRegNode@@6B@ ??_7nmethod@@6B@ ??_7no_rax_RegLOper@@6B@ ??_7no_rax_RegPOper@@6B@ ??_7no_rax_rbx_RegPOper@@6B@ ??_7no_rax_rdx_RegIOper@@6B@ ??_7no_rax_rdx_RegLOper@@6B@ ??_7no_rbp_RegPOper@@6B@ ??_7no_rcx_RegIOper@@6B@ ??_7no_rcx_RegLOper@@6B@ ??_7oop_Relocation@@6B@ ??_7opt_virtual_call_Relocation@@6B@ ??_7orI_mem_immNode@@6B@ ??_7orI_mem_rRegNode@@6B@ ??_7orI_mem_rReg_0Node@@6B@ ??_7orI_rRegNode@@6B@ ??_7orI_rReg_immNode@@6B@ ??_7orI_rReg_memNode@@6B@ ??_7orI_rReg_mem_0Node@@6B@ ??_7orL_mem_immNode@@6B@ ??_7orL_mem_rRegNode@@6B@ ??_7orL_mem_rReg_0Node@@6B@ ??_7orL_rRegNode@@6B@ ??_7orL_rReg_castP2XNode@@6B@ ??_7orL_rReg_castP2X_0Node@@6B@ ??_7orL_rReg_immNode@@6B@ ??_7orL_rReg_memNode@@6B@ ??_7orL_rReg_mem_0Node@@6B@ ??_7outputStream@@6B@ ??_7overflowAddI_rRegNode@@6B@ ??_7overflowAddI_rReg_immNode@@6B@ ??_7overflowAddL_rRegNode@@6B@ ??_7overflowAddL_rReg_immNode@@6B@ ??_7overflowMulI_rRegNode@@6B@ ??_7overflowMulI_rReg_immNode@@6B@ ??_7overflowMulL_rRegNode@@6B@ ??_7overflowMulL_rReg_immNode@@6B@ ??_7overflowNegI_rRegNode@@6B@ ??_7overflowNegL_rRegNode@@6B@ ??_7overflowSubI_rRegNode@@6B@ ??_7overflowSubI_rReg_immNode@@6B@ ??_7overflowSubL_rRegNode@@6B@ ??_7overflowSubL_rReg_immNode@@6B@ ??_7partialSubtypeCheckNode@@6B@ ??_7partialSubtypeCheck_vs_ZeroNode@@6B@ ??_7poll_Relocation@@6B@ ??_7poll_return_Relocation@@6B@ ??_7popCountINode@@6B@ ??_7popCountI_memNode@@6B@ ??_7popCountLNode@@6B@ ??_7popCountL_memNode@@6B@ ??_7powD_regNode@@6B@ ??_7prefetchAllocNTANode@@6B@ ??_7prefetchAllocNode@@6B@ ??_7prefetchAllocT0Node@@6B@ ??_7prefetchAllocT2Node@@6B@ ??_7prefetchrNTANode@@6B@ ??_7prefetchrNode@@6B@ ??_7prefetchrT0Node@@6B@ ??_7prefetchrT2Node@@6B@ ??_7prefetchwNTANode@@6B@ ??_7r15_RegPOper@@6B@ ??_7rFlagsRegOper@@6B@ ??_7rFlagsRegUCFOper@@6B@ ??_7rFlagsRegUOper@@6B@ ??_7rRegIOper@@6B@ ??_7rRegLOper@@6B@ ??_7rRegNOper@@6B@ ??_7rRegPOper@@6B@ ??_7rax_RegIOper@@6B@ ??_7rax_RegLOper@@6B@ ??_7rax_RegNOper@@6B@ ??_7rax_RegPOper@@6B@ ??_7rbx_RegIOper@@6B@ ??_7rbx_RegPOper@@6B@ ??_7rcx_RegIOper@@6B@ ??_7rcx_RegLOper@@6B@ ??_7rdi_RegIOper@@6B@ ??_7rdi_RegPOper@@6B@ ??_7rdx_RegIOper@@6B@ ??_7rdx_RegLOper@@6B@ ??_7regDOper@@6B@ ??_7regFOper@@6B@ ??_7rep_fast_stosbNode@@6B@ ??_7rep_stosNode@@6B@ ??_7rolI_rReg_CLNode@@6B@ ??_7rolI_rReg_Var_C0Node@@6B@ ??_7rolI_rReg_Var_C0_0Node@@6B@ ??_7rolI_rReg_Var_C32Node@@6B@ ??_7rolI_rReg_Var_C32_0Node@@6B@ ??_7rolI_rReg_i1Node@@6B@ ??_7rolI_rReg_i1_0Node@@6B@ ??_7rolI_rReg_i8Node@@6B@ ??_7rolI_rReg_i8_0Node@@6B@ ??_7rolI_rReg_imm1Node@@6B@ ??_7rolI_rReg_imm8Node@@6B@ ??_7rolL_rReg_CLNode@@6B@ ??_7rolL_rReg_Var_C0Node@@6B@ ??_7rolL_rReg_Var_C0_0Node@@6B@ ??_7rolL_rReg_Var_C64Node@@6B@ ??_7rolL_rReg_Var_C64_0Node@@6B@ ??_7rolL_rReg_i1Node@@6B@ ??_7rolL_rReg_i1_0Node@@6B@ ??_7rolL_rReg_i8Node@@6B@ ??_7rolL_rReg_i8_0Node@@6B@ ??_7rolL_rReg_imm1Node@@6B@ ??_7rolL_rReg_imm8Node@@6B@ ??_7rorI_rReg_CLNode@@6B@ ??_7rorI_rReg_Var_C0Node@@6B@ ??_7rorI_rReg_Var_C0_0Node@@6B@ ??_7rorI_rReg_Var_C32Node@@6B@ ??_7rorI_rReg_Var_C32_0Node@@6B@ ??_7rorI_rReg_i1Node@@6B@ ??_7rorI_rReg_i1_0Node@@6B@ ??_7rorI_rReg_i8Node@@6B@ ??_7rorI_rReg_i8_0Node@@6B@ ??_7rorI_rReg_imm1Node@@6B@ ??_7rorI_rReg_imm8Node@@6B@ ??_7rorL_rReg_CLNode@@6B@ ??_7rorL_rReg_Var_C0Node@@6B@ ??_7rorL_rReg_Var_C0_0Node@@6B@ ??_7rorL_rReg_Var_C64Node@@6B@ ??_7rorL_rReg_Var_C64_0Node@@6B@ ??_7rorL_rReg_i1Node@@6B@ ??_7rorL_rReg_i1_0Node@@6B@ ??_7rorL_rReg_i8Node@@6B@ ??_7rorL_rReg_i8_0Node@@6B@ ??_7rorL_rReg_imm1Node@@6B@ ??_7rorL_rReg_imm8Node@@6B@ ??_7roundDouble_nopNode@@6B@ ??_7roundFloat_nopNode@@6B@ ??_7rsi_RegPOper@@6B@ ??_7runtimeStubNode@@6B@ ??_7runtime_call_Relocation@@6B@ ??_7sRegDOper@@6B@ ??_7sRegFOper@@6B@ ??_7sRegIOper@@6B@ ??_7sRegLOper@@6B@ ??_7sRegPOper@@6B@ ??_7safePoint_pollNode@@6B@ ??_7safePoint_poll_farNode@@6B@ ??_7salI_mem_1Node@@6B@ ??_7salI_mem_CLNode@@6B@ ??_7salI_mem_immNode@@6B@ ??_7salI_rReg_1Node@@6B@ ??_7salI_rReg_CLNode@@6B@ ??_7salI_rReg_immNode@@6B@ ??_7salL_mem_1Node@@6B@ ??_7salL_mem_CLNode@@6B@ ??_7salL_mem_immNode@@6B@ ??_7salL_rReg_1Node@@6B@ ??_7salL_rReg_CLNode@@6B@ ??_7salL_rReg_immNode@@6B@ ??_7sarI_mem_1Node@@6B@ ??_7sarI_mem_CLNode@@6B@ ??_7sarI_mem_immNode@@6B@ ??_7sarI_rReg_1Node@@6B@ ??_7sarI_rReg_CLNode@@6B@ ??_7sarI_rReg_immNode@@6B@ ??_7sarL_mem_1Node@@6B@ ??_7sarL_mem_CLNode@@6B@ ??_7sarL_mem_immNode@@6B@ ??_7sarL_rReg_1Node@@6B@ ??_7sarL_rReg_2Node@@6B@ ??_7sarL_rReg_63Node@@6B@ ??_7sarL_rReg_CLNode@@6B@ ??_7sarL_rReg_immNode@@6B@ ??_7section_word_Relocation@@6B@ ??_7shrI_mem_1Node@@6B@ ??_7shrI_mem_CLNode@@6B@ ??_7shrI_mem_immNode@@6B@ ??_7shrI_rReg_1Node@@6B@ ??_7shrI_rReg_CLNode@@6B@ ??_7shrI_rReg_immNode@@6B@ ??_7shrL_mem_1Node@@6B@ ??_7shrL_mem_CLNode@@6B@ ??_7shrL_mem_immNode@@6B@ ??_7shrL_rReg_1Node@@6B@ ??_7shrL_rReg_CLNode@@6B@ ??_7shrL_rReg_immNode@@6B@ ??_7sinD_regNode@@6B@ ??_7sqrtD_immNode@@6B@ ??_7sqrtD_memNode@@6B@ ??_7sqrtD_regNode@@6B@ ??_7sqrtF_immNode@@6B@ ??_7sqrtF_memNode@@6B@ ??_7sqrtF_regNode@@6B@ ??_7stackSlotDOper@@6B@ ??_7stackSlotFOper@@6B@ ??_7stackSlotIOper@@6B@ ??_7stackSlotLOper@@6B@ ??_7stackSlotPOper@@6B@ ??_7staticBufferStream@@6B@ ??_7static_call_Relocation@@6B@ ??_7static_stub_Relocation@@6B@ ??_7storeBNode@@6B@ ??_7storeCNode@@6B@ ??_7storeD0Node@@6B@ ??_7storeD0_immNode@@6B@ ??_7storeDNode@@6B@ ??_7storeF0Node@@6B@ ??_7storeFNode@@6B@ ??_7storeF_immNode@@6B@ ??_7storeIConditionalNode@@6B@ ??_7storeINode@@6B@ ??_7storeImmB0Node@@6B@ ??_7storeImmBNode@@6B@ ??_7storeImmC0Node@@6B@ ??_7storeImmCM0Node@@6B@ ??_7storeImmCM0_regNode@@6B@ ??_7storeImmI0Node@@6B@ ??_7storeImmI16Node@@6B@ ??_7storeImmINode@@6B@ ??_7storeImmL0Node@@6B@ ??_7storeImmLNode@@6B@ ??_7storeImmN0Node@@6B@ ??_7storeImmNKlassNode@@6B@ ??_7storeImmNNode@@6B@ ??_7storeImmP0Node@@6B@ ??_7storeImmPNode@@6B@ ??_7storeLConditionalNode@@6B@ ??_7storeLNode@@6B@ ??_7storeNKlassNode@@6B@ ??_7storeNNode@@6B@ ??_7storePConditionalNode@@6B@ ??_7storePNode@@6B@ ??_7storeSSDNode@@6B@ ??_7storeSSFNode@@6B@ ??_7storeSSINode@@6B@ ??_7storeSSLNode@@6B@ ??_7storeSSPNode@@6B@ ??_7storeV16Node@@6B@ ??_7storeV32Node@@6B@ ??_7storeV4Node@@6B@ ??_7storeV8Node@@6B@ ??_7stringStream@@6B@ ??_7string_compareNode@@6B@ ??_7string_equalsNode@@6B@ ??_7string_indexofNode@@6B@ ??_7string_indexof_conNode@@6B@ ??_7stubNode@@6B@ ??_7subD_immNode@@6B@ ??_7subD_memNode@@6B@ ??_7subD_regNode@@6B@ ??_7subD_reg_immNode@@6B@ ??_7subD_reg_memNode@@6B@ ??_7subD_reg_regNode@@6B@ ??_7subF_immNode@@6B@ ??_7subF_memNode@@6B@ ??_7subF_regNode@@6B@ ??_7subF_reg_immNode@@6B@ ??_7subF_reg_memNode@@6B@ ??_7subF_reg_regNode@@6B@ ??_7subI_mem_immNode@@6B@ ??_7subI_mem_rRegNode@@6B@ ??_7subI_rRegNode@@6B@ ??_7subI_rReg_immNode@@6B@ ??_7subI_rReg_memNode@@6B@ ??_7subL_mem_immNode@@6B@ ??_7subL_mem_rRegNode@@6B@ ??_7subL_rRegNode@@6B@ ??_7subL_rReg_immNode@@6B@ ??_7subL_rReg_memNode@@6B@ ??_7subP_rRegNode@@6B@ ??_7tailjmpIndNode@@6B@ ??_7tanD_regNode@@6B@ ??_7testI_regNode@@6B@ ??_7testI_reg_immNode@@6B@ ??_7testI_reg_memNode@@6B@ ??_7testI_reg_mem_0Node@@6B@ ??_7testL_regNode@@6B@ ??_7testL_reg_immNode@@6B@ ??_7testL_reg_memNode@@6B@ ??_7testL_reg_mem_0Node@@6B@ ??_7testN_memNode@@6B@ ??_7testN_mem_reg0Node@@6B@ ??_7testN_regNode@@6B@ ??_7testP_memNode@@6B@ ??_7testP_mem_reg0Node@@6B@ ??_7testP_regNode@@6B@ ??_7testUL_regNode@@6B@ ??_7testU_regNode@@6B@ ??_7tlsLoadPNode@@6B@ ??_7trampoline_stub_Relocation@@6B@ ??_7unknown_compiledNode@@6B@ ??_7unnecessary_membar_volatileNode@@6B@ ??_7vadd16BNode@@6B@ ??_7vadd16B_memNode@@6B@ ??_7vadd16B_regNode@@6B@ ??_7vadd16S_memNode@@6B@ ??_7vadd16S_regNode@@6B@ ??_7vadd2DNode@@6B@ ??_7vadd2D_memNode@@6B@ ??_7vadd2D_regNode@@6B@ ??_7vadd2FNode@@6B@ ??_7vadd2F_regNode@@6B@ ??_7vadd2INode@@6B@ ??_7vadd2I_regNode@@6B@ ??_7vadd2LNode@@6B@ ??_7vadd2L_memNode@@6B@ ??_7vadd2L_regNode@@6B@ ??_7vadd2SNode@@6B@ ??_7vadd2S_regNode@@6B@ ??_7vadd32B_memNode@@6B@ ??_7vadd32B_regNode@@6B@ ??_7vadd4BNode@@6B@ ??_7vadd4B_regNode@@6B@ ??_7vadd4D_memNode@@6B@ ??_7vadd4D_regNode@@6B@ ??_7vadd4FNode@@6B@ ??_7vadd4F_memNode@@6B@ ??_7vadd4F_regNode@@6B@ ??_7vadd4INode@@6B@ ??_7vadd4I_memNode@@6B@ ??_7vadd4I_regNode@@6B@ ??_7vadd4L_memNode@@6B@ ??_7vadd4L_regNode@@6B@ ??_7vadd4SNode@@6B@ ??_7vadd4S_regNode@@6B@ ??_7vadd8BNode@@6B@ ??_7vadd8B_regNode@@6B@ ??_7vadd8F_memNode@@6B@ ??_7vadd8F_regNode@@6B@ ??_7vadd8I_memNode@@6B@ ??_7vadd8I_regNode@@6B@ ??_7vadd8SNode@@6B@ ??_7vadd8S_memNode@@6B@ ??_7vadd8S_regNode@@6B@ ??_7vand16BNode@@6B@ ??_7vand16B_memNode@@6B@ ??_7vand16B_regNode@@6B@ ??_7vand32B_memNode@@6B@ ??_7vand32B_regNode@@6B@ ??_7vand4BNode@@6B@ ??_7vand4B_regNode@@6B@ ??_7vand8BNode@@6B@ ??_7vand8B_regNode@@6B@ ??_7vdiv2DNode@@6B@ ??_7vdiv2D_memNode@@6B@ ??_7vdiv2D_regNode@@6B@ ??_7vdiv2FNode@@6B@ ??_7vdiv2F_regNode@@6B@ ??_7vdiv4D_memNode@@6B@ ??_7vdiv4D_regNode@@6B@ ??_7vdiv4FNode@@6B@ ??_7vdiv4F_memNode@@6B@ ??_7vdiv4F_regNode@@6B@ ??_7vdiv8F_memNode@@6B@ ??_7vdiv8F_regNode@@6B@ ??_7vecDOper@@6B@ ??_7vecSOper@@6B@ ??_7vecXOper@@6B@ ??_7vecYOper@@6B@ ??_7vframe@@6B@ ??_7virtual_call_Relocation@@6B@ ??_7vmNode@@6B@ ??_7vmul16S_memNode@@6B@ ??_7vmul16S_regNode@@6B@ ??_7vmul2DNode@@6B@ ??_7vmul2D_memNode@@6B@ ??_7vmul2D_regNode@@6B@ ??_7vmul2FNode@@6B@ ??_7vmul2F_regNode@@6B@ ??_7vmul2INode@@6B@ ??_7vmul2I_regNode@@6B@ ??_7vmul2SNode@@6B@ ??_7vmul2S_regNode@@6B@ ??_7vmul4D_memNode@@6B@ ??_7vmul4D_regNode@@6B@ ??_7vmul4FNode@@6B@ ??_7vmul4F_memNode@@6B@ ??_7vmul4F_regNode@@6B@ ??_7vmul4INode@@6B@ ??_7vmul4I_memNode@@6B@ ??_7vmul4I_regNode@@6B@ ??_7vmul4SNode@@6B@ ??_7vmul4S_regNode@@6B@ ??_7vmul8F_memNode@@6B@ ??_7vmul8F_regNode@@6B@ ??_7vmul8I_memNode@@6B@ ??_7vmul8I_regNode@@6B@ ??_7vmul8SNode@@6B@ ??_7vmul8S_memNode@@6B@ ??_7vmul8S_regNode@@6B@ ??_7vor16BNode@@6B@ ??_7vor16B_memNode@@6B@ ??_7vor16B_regNode@@6B@ ??_7vor32B_memNode@@6B@ ??_7vor32B_regNode@@6B@ ??_7vor4BNode@@6B@ ??_7vor4B_regNode@@6B@ ??_7vor8BNode@@6B@ ??_7vor8B_regNode@@6B@ ??_7vshiftcntNode@@6B@ ??_7vshiftcnt_0Node@@6B@ ??_7vsll16S_regNode@@6B@ ??_7vsll16S_reg_immNode@@6B@ ??_7vsll2INode@@6B@ ??_7vsll2I_immNode@@6B@ ??_7vsll2I_regNode@@6B@ ??_7vsll2I_reg_immNode@@6B@ ??_7vsll2LNode@@6B@ ??_7vsll2L_immNode@@6B@ ??_7vsll2L_regNode@@6B@ ??_7vsll2L_reg_immNode@@6B@ ??_7vsll2SNode@@6B@ ??_7vsll2S_immNode@@6B@ ??_7vsll2S_regNode@@6B@ ??_7vsll2S_reg_immNode@@6B@ ??_7vsll4INode@@6B@ ??_7vsll4I_immNode@@6B@ ??_7vsll4I_regNode@@6B@ ??_7vsll4I_reg_immNode@@6B@ ??_7vsll4L_regNode@@6B@ ??_7vsll4L_reg_immNode@@6B@ ??_7vsll4SNode@@6B@ ??_7vsll4S_immNode@@6B@ ??_7vsll4S_regNode@@6B@ ??_7vsll4S_reg_immNode@@6B@ ??_7vsll8I_regNode@@6B@ ??_7vsll8I_reg_immNode@@6B@ ??_7vsll8SNode@@6B@ ??_7vsll8S_immNode@@6B@ ??_7vsll8S_regNode@@6B@ ??_7vsll8S_reg_immNode@@6B@ ??_7vsra16S_regNode@@6B@ ??_7vsra16S_reg_immNode@@6B@ ??_7vsra2INode@@6B@ ??_7vsra2I_immNode@@6B@ ??_7vsra2I_regNode@@6B@ ??_7vsra2I_reg_immNode@@6B@ ??_7vsra2SNode@@6B@ ??_7vsra2S_immNode@@6B@ ??_7vsra2S_regNode@@6B@ ??_7vsra2S_reg_immNode@@6B@ ??_7vsra4INode@@6B@ ??_7vsra4I_immNode@@6B@ ??_7vsra4I_regNode@@6B@ ??_7vsra4I_reg_immNode@@6B@ ??_7vsra4SNode@@6B@ ??_7vsra4S_immNode@@6B@ ??_7vsra4S_regNode@@6B@ ??_7vsra4S_reg_immNode@@6B@ ??_7vsra8I_regNode@@6B@ ??_7vsra8I_reg_immNode@@6B@ ??_7vsra8SNode@@6B@ ??_7vsra8S_immNode@@6B@ ??_7vsra8S_regNode@@6B@ ??_7vsra8S_reg_immNode@@6B@ ??_7vsrl16S_regNode@@6B@ ??_7vsrl16S_reg_immNode@@6B@ ??_7vsrl2INode@@6B@ ??_7vsrl2I_immNode@@6B@ ??_7vsrl2I_regNode@@6B@ ??_7vsrl2I_reg_immNode@@6B@ ??_7vsrl2LNode@@6B@ ??_7vsrl2L_immNode@@6B@ ??_7vsrl2L_regNode@@6B@ ??_7vsrl2L_reg_immNode@@6B@ ??_7vsrl2SNode@@6B@ ??_7vsrl2S_immNode@@6B@ ??_7vsrl2S_regNode@@6B@ ??_7vsrl2S_reg_immNode@@6B@ ??_7vsrl4INode@@6B@ ??_7vsrl4I_immNode@@6B@ ??_7vsrl4I_regNode@@6B@ ??_7vsrl4I_reg_immNode@@6B@ ??_7vsrl4L_regNode@@6B@ ??_7vsrl4L_reg_immNode@@6B@ ??_7vsrl4SNode@@6B@ ??_7vsrl4S_immNode@@6B@ ??_7vsrl4S_regNode@@6B@ ??_7vsrl4S_reg_immNode@@6B@ ??_7vsrl8I_regNode@@6B@ ??_7vsrl8I_reg_immNode@@6B@ ??_7vsrl8SNode@@6B@ ??_7vsrl8S_immNode@@6B@ ??_7vsrl8S_regNode@@6B@ ??_7vsrl8S_reg_immNode@@6B@ ??_7vsub16BNode@@6B@ ??_7vsub16B_memNode@@6B@ ??_7vsub16B_regNode@@6B@ ??_7vsub16S_memNode@@6B@ ??_7vsub16S_regNode@@6B@ ??_7vsub2DNode@@6B@ ??_7vsub2D_memNode@@6B@ ??_7vsub2D_regNode@@6B@ ??_7vsub2FNode@@6B@ ??_7vsub2F_regNode@@6B@ ??_7vsub2INode@@6B@ ??_7vsub2I_regNode@@6B@ ??_7vsub2LNode@@6B@ ??_7vsub2L_memNode@@6B@ ??_7vsub2L_regNode@@6B@ ??_7vsub2SNode@@6B@ ??_7vsub2S_regNode@@6B@ ??_7vsub32B_memNode@@6B@ ??_7vsub32B_regNode@@6B@ ??_7vsub4BNode@@6B@ ??_7vsub4B_regNode@@6B@ ??_7vsub4D_memNode@@6B@ ??_7vsub4D_regNode@@6B@ ??_7vsub4FNode@@6B@ ??_7vsub4F_memNode@@6B@ ??_7vsub4F_regNode@@6B@ ??_7vsub4INode@@6B@ ??_7vsub4I_memNode@@6B@ ??_7vsub4I_regNode@@6B@ ??_7vsub4L_memNode@@6B@ ??_7vsub4L_regNode@@6B@ ??_7vsub4SNode@@6B@ ??_7vsub4S_regNode@@6B@ ??_7vsub8BNode@@6B@ ??_7vsub8B_regNode@@6B@ ??_7vsub8F_memNode@@6B@ ??_7vsub8F_regNode@@6B@ ??_7vsub8I_memNode@@6B@ ??_7vsub8I_regNode@@6B@ ??_7vsub8SNode@@6B@ ??_7vsub8S_memNode@@6B@ ??_7vsub8S_regNode@@6B@ ??_7vxor16BNode@@6B@ ??_7vxor16B_memNode@@6B@ ??_7vxor16B_regNode@@6B@ ??_7vxor32B_memNode@@6B@ ??_7vxor32B_regNode@@6B@ ??_7vxor4BNode@@6B@ ??_7vxor4B_regNode@@6B@ ??_7vxor8BNode@@6B@ ??_7vxor8B_regNode@@6B@ ??_7xaddINode@@6B@ ??_7xaddI_no_resNode@@6B@ ??_7xaddLNode@@6B@ ??_7xaddL_no_resNode@@6B@ ??_7xchgINode@@6B@ ??_7xchgLNode@@6B@ ??_7xchgNNode@@6B@ ??_7xchgPNode@@6B@ ??_7xmlStream@@6B@ ??_7xmlTextStream@@6B@ ??_7xorI_mem_immNode@@6B@ ??_7xorI_mem_rRegNode@@6B@ ??_7xorI_mem_rReg_0Node@@6B@ ??_7xorI_rRegNode@@6B@ ??_7xorI_rReg_im1Node@@6B@ ??_7xorI_rReg_immNode@@6B@ ??_7xorI_rReg_memNode@@6B@ ??_7xorI_rReg_mem_0Node@@6B@ ??_7xorL_mem_immNode@@6B@ ??_7xorL_mem_rRegNode@@6B@ ??_7xorL_mem_rReg_0Node@@6B@ ??_7xorL_rRegNode@@6B@ ??_7xorL_rReg_im1Node@@6B@ ??_7xorL_rReg_immNode@@6B@ ??_7xorL_rReg_memNode@@6B@ ??_7xorL_rReg_mem_0Node@@6B@ ??_7zerox_long_reg_regNode@@6B@ AsyncGetCallTrace JNI_CreateJavaVM JNI_GetCreatedJavaVMs JNI_GetDefaultJavaVMInitArgs JVM_Accept JVM_ActiveProcessorCount JVM_AllocateNewArray JVM_AllocateNewObject JVM_ArrayCopy JVM_AssertionStatusDirectives JVM_Available JVM_Bind JVM_CX8Field JVM_ClassDepth JVM_ClassLoaderDepth JVM_Clone JVM_Close JVM_CompileClass JVM_CompileClasses JVM_CompilerCommand JVM_Connect JVM_ConstantPoolGetClassAt JVM_ConstantPoolGetClassAtIfLoaded JVM_ConstantPoolGetDoubleAt JVM_ConstantPoolGetFieldAt JVM_ConstantPoolGetFieldAtIfLoaded JVM_ConstantPoolGetFloatAt JVM_ConstantPoolGetIntAt JVM_ConstantPoolGetLongAt JVM_ConstantPoolGetMemberRefInfoAt JVM_ConstantPoolGetMethodAt JVM_ConstantPoolGetMethodAtIfLoaded JVM_ConstantPoolGetSize JVM_ConstantPoolGetStringAt JVM_ConstantPoolGetUTF8At JVM_CountStackFrames JVM_CurrentClassLoader JVM_CurrentLoadedClass JVM_CurrentThread JVM_CurrentTimeMillis JVM_DTraceActivate JVM_DTraceDispose JVM_DTraceGetVersion JVM_DTraceIsProbeEnabled JVM_DTraceIsSupported JVM_DefineClass JVM_DefineClassWithSource JVM_DefineClassWithSourceCond JVM_DesiredAssertionStatus JVM_DisableCompiler JVM_DoPrivileged JVM_DumpAllStacks JVM_DumpThreads JVM_EnableCompiler JVM_EnqueueOperation JVM_Exit JVM_FillInStackTrace JVM_FindClassFromBootLoader JVM_FindClassFromCaller JVM_FindClassFromClass JVM_FindClassFromClassLoader JVM_FindLibraryEntry JVM_FindLoadedClass JVM_FindPrimitiveClass JVM_FindSignal JVM_FreeMemory JVM_GC JVM_GetAllThreads JVM_GetArrayElement JVM_GetArrayLength JVM_GetCPClassNameUTF JVM_GetCPFieldClassNameUTF JVM_GetCPFieldModifiers JVM_GetCPFieldNameUTF JVM_GetCPFieldSignatureUTF JVM_GetCPMethodClassNameUTF JVM_GetCPMethodModifiers JVM_GetCPMethodNameUTF JVM_GetCPMethodSignatureUTF JVM_GetCallerClass JVM_GetClassAccessFlags JVM_GetClassAnnotations JVM_GetClassCPEntriesCount JVM_GetClassCPTypes JVM_GetClassConstantPool JVM_GetClassContext JVM_GetClassDeclaredConstructors JVM_GetClassDeclaredFields JVM_GetClassDeclaredMethods JVM_GetClassFieldsCount JVM_GetClassInterfaces JVM_GetClassLoader JVM_GetClassMethodsCount JVM_GetClassModifiers JVM_GetClassName JVM_GetClassNameUTF JVM_GetClassSignature JVM_GetClassSigners JVM_GetClassTypeAnnotations JVM_GetComponentType JVM_GetDeclaredClasses JVM_GetDeclaringClass JVM_GetEnclosingMethodInfo JVM_GetFieldAnnotations JVM_GetFieldIxModifiers JVM_GetFieldTypeAnnotations JVM_GetHostName JVM_GetInheritedAccessControlContext JVM_GetInterfaceVersion JVM_GetLastErrorString JVM_GetManagement JVM_GetMethodAnnotations JVM_GetMethodDefaultAnnotationValue JVM_GetMethodIxArgsSize JVM_GetMethodIxByteCode JVM_GetMethodIxByteCodeLength JVM_GetMethodIxExceptionIndexes JVM_GetMethodIxExceptionTableEntry JVM_GetMethodIxExceptionTableLength JVM_GetMethodIxExceptionsCount JVM_GetMethodIxLocalsCount JVM_GetMethodIxMaxStack JVM_GetMethodIxModifiers JVM_GetMethodIxNameUTF JVM_GetMethodIxSignatureUTF JVM_GetMethodParameterAnnotations JVM_GetMethodParameters JVM_GetMethodTypeAnnotations JVM_GetPrimitiveArrayElement JVM_GetProtectionDomain JVM_GetResourceLookupCache JVM_GetResourceLookupCacheURLs JVM_GetSockName JVM_GetSockOpt JVM_GetStackAccessControlContext JVM_GetStackTraceDepth JVM_GetStackTraceElement JVM_GetSystemPackage JVM_GetSystemPackages JVM_GetTemporaryDirectory JVM_GetThreadInterruptEvent JVM_GetThreadStateNames JVM_GetThreadStateValues JVM_GetVersionInfo JVM_Halt JVM_HoldsLock JVM_IHashCode JVM_InitAgentProperties JVM_InitProperties JVM_InitializeCompiler JVM_InitializeSocketLibrary JVM_InternString JVM_Interrupt JVM_InvokeMethod JVM_IsArrayClass JVM_IsConstructorIx JVM_IsInterface JVM_IsInterrupted JVM_IsNaN JVM_IsPrimitiveClass JVM_IsSameClassPackage JVM_IsSilentCompiler JVM_IsSupportedJNIVersion JVM_IsThreadAlive JVM_IsVMGeneratedMethodIx JVM_KnownToNotExist JVM_LatestUserDefinedLoader JVM_Listen JVM_LoadClass0 JVM_LoadLibrary JVM_Lseek JVM_MaxMemory JVM_MaxObjectInspectionAge JVM_MonitorNotify JVM_MonitorNotifyAll JVM_MonitorWait JVM_NanoTime JVM_NativePath JVM_NewArray JVM_NewInstanceFromConstructor JVM_NewMultiArray JVM_OnExit JVM_Open JVM_RaiseSignal JVM_RawMonitorCreate JVM_RawMonitorDestroy JVM_RawMonitorEnter JVM_RawMonitorExit JVM_Read JVM_Recv JVM_RecvFrom JVM_RegisterSignal JVM_ReleaseUTF JVM_ResolveClass JVM_ResumeThread JVM_Send JVM_SendTo JVM_SetArrayElement JVM_SetClassSigners JVM_SetLength JVM_SetNativeThreadName JVM_SetPrimitiveArrayElement JVM_SetSockOpt JVM_SetThreadPriority JVM_Sleep JVM_Socket JVM_SocketAvailable JVM_SocketClose JVM_SocketShutdown JVM_StartThread JVM_StopThread JVM_SupportsCX8 JVM_SuspendThread JVM_Sync JVM_Timeout JVM_TotalMemory JVM_TraceInstructions JVM_TraceMethodCalls JVM_UnloadLibrary JVM_Write JVM_Yield gHotSpotVMIntConstantEntryArrayStride gHotSpotVMIntConstantEntryNameOffset gHotSpotVMIntConstantEntryValueOffset gHotSpotVMIntConstants gHotSpotVMLongConstantEntryArrayStride gHotSpotVMLongConstantEntryNameOffset gHotSpotVMLongConstantEntryValueOffset gHotSpotVMLongConstants gHotSpotVMStructEntryAddressOffset gHotSpotVMStructEntryArrayStride gHotSpotVMStructEntryFieldNameOffset gHotSpotVMStructEntryIsStaticOffset gHotSpotVMStructEntryOffsetOffset gHotSpotVMStructEntryTypeNameOffset gHotSpotVMStructEntryTypeStringOffset gHotSpotVMStructs gHotSpotVMTypeEntryArrayStride gHotSpotVMTypeEntryIsIntegerTypeOffset gHotSpotVMTypeEntryIsOopTypeOffset gHotSpotVMTypeEntryIsUnsignedOffset gHotSpotVMTypeEntrySizeOffset gHotSpotVMTypeEntrySuperclassNameOffset gHotSpotVMTypeEntryTypeNameOffset gHotSpotVMTypes jio_fprintf jio_printf jio_snprintf jio_vfprintf jio_vsnprintf

SpyLogger V1.1/res/bin/servertool.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 140a7b872e5eba1884be3affde57a836e09a9f220aa10afab8272289805fabae
MD5 faf45caf88d6d5e15d7107afab6158f2
SHA1 d57172d2842ee10cf5fc920702864941724a64ee
SHA512 d68a15589e86cb7463621fc8920573e988c69f7cd3d620ecff1c3ff8dee9c84efc8803d51540a9b20441b27ef2f40f39eb6f8bf31e8efeb2ef0deffe6e241b03
SSDEEP 96:vST62D1rCl6MvKGrgRiWOBazv2ZqxyPuIIiVEfoa/UcE2tVk065tRleRv5x:vST60yTHTkzv2ZG5IIKEfoSAXefx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\servertool.pdb

SpyLogger V1.1/res/bin/splashscreen.dll

IMPHASH 42c312ba8e252d9ecd8248364ade9b06
SHA256 c0892491e355b2ddd33d75eb6af950d864c0941e004ca59ef585b848102cd9e9
MD5 698dbaf299da5546d8f03af297802618
SHA1 5824a482e8a08626560bf7dd8aed26d38fbff81a
SHA512 777fa502574023090c11c64db1110bd689f261849ed24feda1718f5116b9692bc37bd1a7881b28c5e0b84a9f1df796ee2cc6d1a1a638ebd675fcb6ca0386b36e
SSDEEP 6144:rllAD+nbbDr6l0295+qYSPkLQHSdm+huGa1z9TBf:v36l07fS8L/9gGA9T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

154488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\splashscreen.pdb

kernel32

CreateThread GetModuleHandleA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetTickCount MultiByteToWideChar ExitProcess GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess Sleep DecodePointer EncodePointer RaiseException LoadLibraryA GetLastError FreeLibrary GetProcAddress LocalAlloc GetSystemTimeAsFileTime

gdi32

RealizePalette GetDeviceCaps CreateCompatibleDC CreateDIBSection SelectObject DeleteObject DeleteDC CreateRectRgn CombineRgn ExtCreateRegion StretchDIBits SelectPalette CreatePalette

msvcr100

longjmp _setjmp realloc pow fopen ungetc fgetc _malloc_crt _initterm _initterm_e _encoded_null _amsg_exit __C_specific_handler __CppXcptFilter __crt_debugger_hook __clean_type_info_names_internal _unlock __dllonexit _lock _onexit getenv sscanf __iob_func fprintf _errno strlen memcmp calloc strncmp malloc free fclose fread memset memcpy floor

SpyLogger V1.1/res/bin/sunec.dll

IMPHASH 31555a82366aca0bbe036130635fd9f4
SHA256 35f6d920fb547d708ee6468b51f066c550b47166a56e063e1ea16cd4f03fee19
MD5 a523bbae9699730572af6077ea23489a
SHA1 06c3429a267d206039e04f8db6f5f667a110684e
SHA512 8364c7f40703767af926246b4fe60e002fba5f9ed50d74311f8d679e17f082858fe32bcebb220479d8df4dd6a9988bc6f15bbf5586281b17866fd536050828ff
SSDEEP 3072:56lc2/fLTGZb+yZOpyZlzRcyvOZvIwspfS:56lc2rTGZb+2aEhyyvqv3c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

69844

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\sunec.pdb

SpyLogger V1.1/res/bin/sunmscapi.dll

IMPHASH 1efb5df8604f5f401f97325e25590ec5
SHA256 255b7130d2afb808f1dcdd98b15e30c4cc518cfd254e76b38e57e7e86159f66a
MD5 90c1f04cd7df148570d102489e3695d6
SHA1 b8bac4ec3114c5020ef2f6a9a4cada4e05527138
SHA512 1b703709de09bd54939fc42ee47b0961287263eeb251e4fe8ab16d07b2d061f04d7fa21a402bb441cdd7ff5c661ca1e28e6a7ff8d2c6a09756449519ca029cef
SSDEEP 768:l0Pe7m1FOdu+d6JU26EUX9LmMph01FXWuu3QFDK:KPe7GAdld6uB901FXWVQFDK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

16208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\sunmscapi.pdb

crypt32

CryptImportPublicKeyInfo CertFindCertificateInStore CertDeleteCertificateFromStore CertCreateCertificateContext CertSetCertificateContextProperty CertAddCertificateContextToStore CertFreeCertificateContext CertOpenSystemStoreA CertEnumCertificatesInStore CryptAcquireCertificatePrivateKey CertGetPublicKeyLength CertGetNameStringA CertFreeCertificateChain CertCloseStore CertGetCertificateChain

advapi32

CryptGenRandom CryptImportKey CryptExportKey CryptEncrypt CryptDecrypt CryptGenKey CryptVerifySignatureA CryptCreateHash CryptGetProvParam CryptSetHashParam CryptSignHashA CryptDestroyHash CryptDestroyKey CryptGetUserKey CryptSetKeyParam CryptGetKeyParam CryptReleaseContext CryptAcquireContextA

msvcr100

__dllonexit _lock _onexit _unlock __clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter _amsg_exit _encoded_null free _initterm_e _initterm _malloc_crt memset memcpy mbstowcs sprintf ??3@YAXPEAX@Z __C_specific_handler strcmp strcpy ??2@YAPEAX_K@Z

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess Sleep DecodePointer EncodePointer GetLastError FormatMessageA

SpyLogger V1.1/res/bin/tnameserv.exe

IMPHASH 2c43cda2243b5af72e180e8d1f09446d
SHA256 57d2745ed5862d1a1d3836cf8641e44cf3d253cc180b0da523f04e986241c953
MD5 e76a345de1bb239cd8dda76ab7a0d6e4
SHA1 5393cf8324ea0d05dda1e5de913b1102fc89f8b9
SHA512 cf686625b613ef295eb3149e57c3547f45d5b0008945b69b0f0325138b300f7c1d75f5d70079abd0e0c725c2684937aec23eb4eaa812616b3300145409b8572f
SSDEEP 96:pfKvJvmcT3IOgJqW6HO1vDwZBTHaIiVEfoGnq5Vk0AtRleRv5:pOvmg3FzkvMZoIKEfoGqCef
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\tnameserv.pdb

SpyLogger V1.1/res/bin/unpack.dll

IMPHASH 6bddbb559f8b2250b31471a62dbf3aee
SHA256 35dbc237ee7107efc3ac00432c1e10ae79cb0e12b11873f2beec695f19d5d8ca
MD5 f991146ad5458646ed03ce8621dc1649
SHA1 756037702ab3a00a8ddf98b39dedcd0f36fd2e16
SHA512 580a360db262ddf442aea3a4af9c523f76531e876ddefab6509413c6192f2efb634abcf41aeb352ebcbd45fe1c1631efdb738425685c5de2a62c1bbec8b53f8d
SSDEEP 1536:womjjzWtEoTtq9rMDtmynJmQm1NzQZ+Y1dyyU:woizpow9rMDQynJ6NzQZ+Y1dyyU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

52824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\unpack.pdb

SpyLogger V1.1/res/bin/unpack200.exe

IMPHASH e1a3b9c755b6e615b4050d0bd623bb5b
SHA256 1af70d4d1dab19e91d62759b83b98ca50e10af962588f7208f029af7c561b8c5
MD5 bf687d700d1bced5d7254920a02e07f2
SHA1 d3c712f6e31ed9efd3669ab40ff87ab54cfc77c9
SHA512 56b63c144098d3df289c25b7c3da2b97dc6a10d4591aad7eb4a0f6cae665c1b1363078d41065fd244fe1ece8f09fe89c82eaeeafa149cfb9e5b53a19d8c53c5d
SSDEEP 3072:k/Hh4JGbU6jzcZ33A2QBKmK7NYyogpTBfUfy/NTwph6YZf:kHh4P63cZHP4oKynTBcfy/NTwphL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

125216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\objs\unpackexe\unpack200.pdb

Name

.text

Size

127KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SpyLogger V1.1/res/bin/verify.dll

IMPHASH 5fc95510f1d4877f09defdccf9bf289a
SHA256 9b5b6ce5de14267b1759714e6d47f89093a773fa7486f382a3bc8c10259cc176
MD5 af3b52ed4c852e984a51415d20236fdf
SHA1 55a1c2b5223656381b161a5395d5ae9f3c74c95c
SHA512 62c6dd6d1caebeee6cd90769e730cfcad606a0f4252ac56524ecf48006742326489ba5227953ca0674e7f816fab33d1ebc95dfdfb943ca429f9f0074a2465ef3
SSDEEP 768:Wo0OxwiPgROB/eVTjEZyyIgA7pxcvlhZntJYGhhylK6EBk7vYIY:y6DhIgUYhtaG/X6V7vY5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

28048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\verify.pdb

jvm

jio_fprintf JVM_GetClassCPEntriesCount JVM_GetClassCPTypes JVM_GetClassFieldsCount JVM_GetClassMethodsCount JVM_IsVMGeneratedMethodIx JVM_GetMethodIxExceptionsCount JVM_GetMethodIxExceptionIndexes JVM_GetMethodIxMaxStack JVM_GetMethodIxExceptionTableLength JVM_GetMethodIxExceptionTableEntry JVM_GetMethodIxLocalsCount JVM_GetCPMethodNameUTF JVM_GetCPFieldSignatureUTF JVM_GetCPMethodSignatureUTF JVM_GetCPFieldModifiers JVM_GetCPMethodModifiers JVM_IsSameClassPackage JVM_IsInterface JVM_GetCPMethodClassNameUTF JVM_GetCPFieldClassNameUTF JVM_GetCPClassNameUTF JVM_GetMethodIxArgsSize JVM_GetMethodIxModifiers JVM_IsConstructorIx JVM_GetMethodIxByteCodeLength JVM_GetMethodIxByteCode JVM_GetFieldIxModifiers JVM_FindClassFromClass jio_vsnprintf JVM_GetClassNameUTF JVM_GetMethodIxNameUTF JVM_GetMethodIxSignatureUTF jio_snprintf JVM_ReleaseUTF

msvcr100

_onexit _lock __dllonexit _unlock __clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter __C_specific_handler _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt __iob_func _setjmp strchr memcpy free longjmp malloc calloc strcpy strlen strcmp memset

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess Sleep DecodePointer EncodePointer

SpyLogger V1.1/res/bin/w2k_lsa_auth.dll

IMPHASH 9d4fb833b3cc691293ab97be58950f4d
SHA256 16b7261b5eaffa932e293457a7393a7865a90f3ca379b28e2ec4ca66624dec1f
MD5 e29b371b85d31103e13c1510544ca159
SHA1 cde49777bd23243d95209e2d077262a79ca320a6
SHA512 e658e8c64c97b47125d604405d913939522444f740404e464d18762bed8c13fdb7eeece4a74f9a188f2d531e8bd5265751aa35764cb1a5ea2ade4ad375f5b7c0
SSDEEP 384:xW3UVGSk95yD2lYZVck7UjqsNBiWNLEy2THbqhlnLSLbLMDpbGGNET7T7T7T7bsR:xW3Ugr5y2iZj7qHiWNLEy2THbqhlnLSq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

10560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\w2k_lsa_auth.pdb

SpyLogger V1.1/res/bin/zip.dll

IMPHASH 19bf3619cdd301b72f22fe034bcdca20
SHA256 dd242c3f99c58afdb9fc11205ad2e93f7ca6a1882937c4b8490afe970e9bd10c
MD5 d97648e9d05c7af51cae32f113a88162
SHA1 210abc0567a234d494af4d9b38929789b501dc35
SHA512 24ff77f1f60e029a54e5d5bafb3eb0866b418ca0526fc83e98ae31a1d619ae2f68569dce0e02f04c35988cb61a0ff178603f418e16c285d8cf2ac77a043b0c36
SSDEEP 1536:ZtXzqixH3W9QRYuz/2uq2NIOQIOpVnToIf/Lkf:ZtXmCyQk1cGp9TBfzkf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

45344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\src\AOSP-openjdk-cygwin\jdk8u\build\windows-x86_64-normal-server-release\jdk\bin\zip.pdb

Java_java_util_jar_JarFile_getMetaInfEntryNames Java_java_util_zip_Adler32_update Java_java_util_zip_Adler32_updateByteBuffer Java_java_util_zip_Adler32_updateBytes Java_java_util_zip_CRC32_update Java_java_util_zip_CRC32_updateByteBuffer Java_java_util_zip_CRC32_updateBytes Java_java_util_zip_Deflater_deflateBytes Java_java_util_zip_Deflater_end Java_java_util_zip_Deflater_getAdler Java_java_util_zip_Deflater_init Java_java_util_zip_Deflater_initIDs Java_java_util_zip_Deflater_reset Java_java_util_zip_Deflater_setDictionary Java_java_util_zip_Inflater_end Java_java_util_zip_Inflater_getAdler Java_java_util_zip_Inflater_inflateBytes Java_java_util_zip_Inflater_init Java_java_util_zip_Inflater_initIDs Java_java_util_zip_Inflater_reset Java_java_util_zip_Inflater_setDictionary Java_java_util_zip_ZipFile_close Java_java_util_zip_ZipFile_freeEntry Java_java_util_zip_ZipFile_getCommentBytes Java_java_util_zip_ZipFile_getEntry Java_java_util_zip_ZipFile_getEntryBytes Java_java_util_zip_ZipFile_getEntryCSize Java_java_util_zip_ZipFile_getEntryCrc Java_java_util_zip_ZipFile_getEntryFlag Java_java_util_zip_ZipFile_getEntryMethod Java_java_util_zip_ZipFile_getEntrySize Java_java_util_zip_ZipFile_getEntryTime Java_java_util_zip_ZipFile_getNextEntry Java_java_util_zip_ZipFile_getTotal Java_java_util_zip_ZipFile_getZipMessage Java_java_util_zip_ZipFile_initIDs Java_java_util_zip_ZipFile_open Java_java_util_zip_ZipFile_read Java_java_util_zip_ZipFile_startsWithLOC ZIP_CRC32 ZIP_Close ZIP_FindEntry ZIP_GetNextEntry ZIP_Open ZIP_ReadEntry

SpyLogger V1.1/res/bin/zipalign.exe

IMPHASH 40dd968292929322479512a55bbfd207
SHA256 13f6f6be7d322483c967f79a35683baf024a26b5e7837e16e58c2d9626c8678a
MD5 81685347e5b418a412472456a2492046
SHA1 625bc3215df7635649454af2dc3db7ced6626624
SHA512 bf1a91670948c8e76ff0d5ff84f47ad359d9a9c713577033c26c76917d65a0d497d5b0b7dd3614f560664ed24d92669b364a4d4e3bb634e4986831401b05101e
SSDEEP 24576:3IHViVWF74PKDeIX4CUFp4ay7Pp0G+TtWSgGW:4HG/A7xuTAT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

ce:bc:0f:49:a1:71:5b:78:80:d4:da:ce:0c:a4:d3:4c:40:07:4d:ef:76:9b:eb:53:cd:07:bc:63:a8:6d:be:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Chains

Jul 7, 2021

Minor OS version

0

Major OS version

6

Entry point

5248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileMappingW CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FindFirstVolumeW FindNextVolumeW FindVolumeClose FlsAlloc FlsGetValue FlsSetValue GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetFileAttributesA GetFileInformationByHandle GetFileSizeEx GetFileType GetHandleInformation GetLastError GetModuleFileNameA GetProcessAffinityMask GetStartupInfoA GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetTickCount GetVolumeInformationW InitOnceExecuteOnce InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection MapViewOfFile MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSRWLockExclusive ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetEndOfFile SetEvent SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte

api-ms-win-crt-convert-l1-1-0

_strtod_l _strtoi64_l _strtoui64_l _ultoa mbstowcs strtol strtoul wcrtomb_s wcstol wcstombs wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron getenv

api-ms-win-crt-filesystem-l1-1-0

_findclose _findfirst32 _findnext32 _fstat32i64 _fullpath _lock_file _stat32 _stat32i64 _unlock_file _wmkdir _wunlink _unlink _rmdir _access

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc calloc free malloc realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsprintf __stdio_common_vsscanf _get_osfhandle _lseeki64 _telli64 _wfopen _wmktemp_s _wopen fclose feof ferror fflush fgetwc fopen fputc fputs fputwc fread fseek ftell fwrite getc rewind ungetc _write _read _fileno _close

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func ___mb_cur_max_func __pctype_func _configthreadlocale _create_locale _free_locale localeconv setlocale __initialize_lconv_for_unsigned_char

api-ms-win-crt-string-l1-1-0

_isctype_l _iswalpha_l _iswcntrl_l _iswdigit_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _strcoll_l _strnicmp _strxfrm_l _tolower_l _toupper_l _towlower_l _towupper_l _wcscoll_l _wcsxfrm_l islower isspace isupper iswctype isxdigit memset strcmp strcpy strcpy_s strlen strncmp tolower wcslen _strdup

api-ms-win-crt-private-l1-1-0

_setjmp3 longjmp memchr memcmp memcpy memmove strchr strrchr

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _localtime32 _localtime32_s _mktime32 _strftime_l _time32 _tzset strftime

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv __p___wargv __p__acmdln __sys_nerr _beginthreadex _cexit _configure_narrow_argv _configure_wide_argv _crt_atexit _endthreadex _errno _initialize_narrow_environment _initialize_wide_environment _initterm _set_invalid_parameter_handler abort exit signal strerror strerror_s _getpid

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

Name

.text

Size

675KB

Virtual Size

674KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

81B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gcc_exc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SpyLogger V1.1/res/lib/accessibility.properties

SHA256 68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf
MD5 2ed483df31645d3d00c625c00c1e5a14
SHA1 27c9b302d2d47aae04fc1f4ef9127a2835a77853
SHA512 4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/amd64/jvm.cfg

SHA256 23f728cc2bf14e62d454190ea0139f159031b5bd9c3f141ca9237c4c5c96ec1d
MD5 c60e77ff5f3887c743971e73e6f0e0b1
SHA1 9b0cfd38ec5b7bd5bd1c364dee2e1b452a063c02
SHA512 07aca3de1a03a3b64b691fd41e35e6596760baf24c4f24e86fca87d2acf3a4814b17cd9751adc2dcd0689848f3d582fb3ee01d413e3a61d1d98397d72fe545e9
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/calendars.properties

SHA256 0915e64c2a86c35b0b60df2bc6fdcfc4cd41cd4064ee0d5bac287e2406e203c9
MD5 2427a39cb407a43b67976b83ceb3775a
SHA1 e5a3b02ff45ee1ce47215b30851cf6e956e0c15e
SHA512 d69d7a70212fdc1b98d9a51e50260cc4e45d3d8e0966f62d2caa8d5213806755c4953b5b965a5f6dbcf304d343d41d20170a8e6a47e815eb68c416c0fe069ae5
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/charsets.jar

SHA256 386b125f3533a2c697018b551f69162ac559cf6309a12b1b747e566522d66bf6
MD5 4d6b25d797eef599975252b9a48a1b79
SHA1 ed051621a4bd29728bab706f075dd3a81772b171
SHA512 7e39e2ca17bfb0af7871ee4e5de5069cc600f407bf90bd5816dc518a004506bfaabbe9e9857bb566c9ef7ef944dab0ad938c2440b306771abae0c12c6ede482e
SSDEEP 49152:EdZide4TQfMe2dHPCucnoYaxNc1sGjlbgSBK4:EdZi04s+kozcuKlbgU
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/classlist

SHA256 01fe24232d0dbefe339f88c44a3fd3d99ff0e17ae03926ccf90b835332f5f89c
MD5 7fc71a62d85ccf12996680a4080aa44e
SHA1 199dccaa94e9129a3649a09f8667b552803e1d0e
SHA512 b0b9b486223cf79ccf9346aaf5c1ca0f9588247a00c826aa9f3d366b7e2ef905af4d179787dcb02b32870500fd63899538cf6fafcdd9b573799b255f658ceb1d
SSDEEP 1536:4X/nxfn5rxLyMznYolTzlff5OK3COHoHNG5rb/cxNwmCX1g86K2oWdAqNqc+KMjD:qxn5rxLyMzbf5OK3CJNG51g86A
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/cmm/CIEXYZ.pf

SHA256 98cf012f6122c833b1ff4fbbe37f43a808d769d9b10ba43f3411728e7bb58bea
MD5 09bfdcd5b55fe322faf0a4cf94f289c2
SHA1 fb7d37db9ad5679600a27352aa1998d5bcdc9311
SHA512 f62d3f6762f6649f97b0df031c2c381bb4553c7b5cdb39c8ed87e8256ec560437b7d60e728fd10a581efb5f4ddd3d213c9b25707830e32845b451cd9dc3540f5
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/cmm/GRAY.pf

SHA256 d3fd8cb41b7ef8c5ea53bfecb1ad6d4762197c8eab04444545e083dff6f86fa9
MD5 fd6340c81f2adc503aea746b79a96979
SHA1 d73abfdf682fd0f570775b90e40d714976339f33
SHA512 a2c861b66c78c66119172a57ad96bc68cc51959b4a41d300c30fe16e4d10077a8f6b0328acda14602c054bd291da49865c77b8358a285211df7e10011dd06934
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/cmm/LINEAR_RGB.pf

SHA256 790da58ccc79d03658283652716ec9896ed31e0392d818e60f6832815ee79f4c
MD5 cfecf0a79f8e6dc8d8120302f2a2e837
SHA1 7576e83e5911096471a97f5e73f3238c6ffe6976
SHA512 b5a90b49ad4df94bb7e4d88796baa7d6f908d892815bc3b59e441b3a9262682eaa5610052d75f76b87b85a577d2e12096676d6c56152b0e80dae6d7b72ea31a1
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/cmm/PYCC.pf

SHA256 0031aa2b8b4d490369a2a601ae0d95505df0cb86c0504f080c02ed87e84b3ddc
MD5 2f3658826c5402382e78bfda48a78a6b
SHA1 da0db2d41e6cead9e38a7e4a5c08fa7e90e57b22
SHA512 f1114143e1f656dfd68e3f32d87439dfc1dddb859e2664da3e902feebe3ac63e04213230c9ff3ec630e390eb3a85e2fd483a6e5ad2992bf3d89d1129faf86bf5
SSDEEP 3072:kPQxu94sua+Gl+tqocgEBRQTbwAIoF1r+KRlN13yFs+75rcjG1sIGH69Jwf4CVoy:kPQxu9iaOtxOQAB81iyxyWs5gH
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/cmm/sRGB.pf

SHA256 87e382b9336e6a0417a4d860173109ab319a029cf2972e19833a3327c65bd7e4
MD5 f6439592ef7ced5abdd4ab4cba3777fb
SHA1 11c7be03d659c369474a6f2231561350ae7889ab
SHA512 9029be4a78e1a3c59fb2587d9a8e9edfb08415c9d4ec4c5956808c0144dcde6fd78f50a5d6e7a3ad441be332c9207bc93b83a4b96ed6afdff257d5cc7deade10
SSDEEP 96:/Kmx6MT0D5MdtbZPAVwzVZ6MT0D5MdtbZPAVwzVZ6MT0D5MdtbZPAVwzVR:/TzYNMtKwBYNMtKwBYNMtKw/
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/content-types.properties

SHA256 46f47b3883c7244a819ae1161113fe9d2375f881b75c9b3012d7a6b3497e030a
MD5 f507712b379fdc5a8d539811faf51d02
SHA1 82bb25303cf6835ac4b076575f27e8486dab9511
SHA512 cb3c99883336d04c42cea9c2401e81140ecbb7fc5b8ef3301b13268a45c1ac93fd62176ab8270b91528ac8e938c7c90cc9663d8598e224794354546139965dfe
SSDEEP 96:r45Vf4fq7MBzO4pYEZ2MQ6KXr3NO0slzMX+W1CuHvvABbiAQ+xaW/ioLHTU+Wsch:r4KJO4mEZ2MQ6Cr3NO0slzMX+WIuHvvv
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/currency.data

SHA256 668e6d107e4e63310d067c0b54af357c083d961fd99ec465fe76fcc3860ce603
MD5 a30d03f3e7bdc05878cf1919aae62bc9
SHA1 bf524381a7a9b9d5bbab48069c583d2936e367a1
SHA512 5d7bbc27fec6e24eea1bd6ef3a89f8332b2d7a03deeeda66dd34f4c65ec64ec14a6ada53f77743849eef56d609d0c36576077f82479955b43c8553f894b72b61
SSDEEP 48:6HlWAFFGFSupi94blATFxjGph5vLC6/w37ZXP/bVm/eEzOBJ:6HlWAEi94blAT+ph5vLkZ/pmrqr
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/access-bridge-64.jar

SHA256 eaeb02dad5fd6969609f3dc597687f8ccef5e20ea19f4bf08a38f17ee474a101
MD5 3e2a692e11e30ac5df6c6571d11ce3a5
SHA1 5b7ec5ded1377ed295bd58ade30c000bd9cccea4
SHA512 0b8a3e22059370b9bed086b4fc94dc3ed893ab9be467094533674589aec9372f539ed0da3ec7cf35914747b7b4239b1c11f3412909c2a512ee27eaf78cfd6885
SSDEEP 3072:SD8Em0xCqnGAieis2pZpRq0v1yRRm3Y3dwP6E88qlx/RdoVrNxRCsGbGDLK:Foe+6ptv1iRmo3IJslxpmPxRCsc
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/cldrdata.jar

SHA256 af54839cc4b1d03cc680400f638e22ef8dc5a1e49384352cc7279b55f0d72114
MD5 baf313edcd8d1929f6371a546871a96f
SHA1 7e2bc994335cac6492d037ade2148e76fd3c8fe6
SHA512 96b17d58802ff8da536e4965b424a8d95668b16f129cc8f119273bea1111dc50d7e9c6bed5e6c72b717974c1c4b41ead5c13e22ca24142bd0205af791f01e462
SSDEEP 98304:01XP8zdepiAra/CR4D1dM5pCNfVdEKgw4RE354zuifkf:01Xk4ZrlA1dsMfj9p4ii8f
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/dnsns.jar

SHA256 4614cbbb683f252de94477d4ccdc252a77b75fb663fcb3648ee5cd4175a79f74
MD5 f2a3a536098db5e8518595d01a21d24b
SHA1 70ccff43c9525075078954f8db7104ed6ce53fb0
SHA512 53fb3e5d97432970c3a8cbc70c79036b99e3661b77321da993c8e46154e3e8ffc78203d5db27b8fc551e305d1aa98ae4a754662966ecc21cf3cc584093107223
SSDEEP 192:2L5jIgh67WbMCJuyDXmHTEIWB7EH+mqcEb+wYtvEmbgLCqjljAaGn:IZM7WbMAWTFWBAH+BCrEmE6n
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/jaccess.jar

SHA256 90831907a66597396677152b4ad62ddf09bb048f6b6ffac891b132d38fb6729c
MD5 6df26dcb8f095886f7a7e0739ea0ecea
SHA1 eca876c87b7db05f374bf02a600e7b1bb01b638e
SHA512 241499364fec41c490c4d0eae19e019cf7e83587e24e58e049d72ddec009a1668672aa077ca7cec6637ac6125c0005d1eb27a3d0c364ff5b7581f33a5702660d
SSDEEP 768:uYVE+9qfgKbWnXuZCQvfTfJrbILtkZQnWn1091qQojE4oQ:uKE+9WgfnXuTfDZIeQnWn10Dq13oQ
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/localedata.jar

SHA256 ddd2bd6002c152d9d5d07cd31895cf487e8660ab6ed04525398a5c5c556b10b8
MD5 6826a185fc9bec1510c8ec466b8649fc
SHA1 82f73af0f7049aa76e7895f6a462084b69babcf9
SHA512 a2dc8bd4e1c784f07fc8ed0f921eda9c647dc79bb329fd348be39b7fd5a0c102113af01d3081e0404000dee57b152aa2e94304509f92b3e6f90ea4e583841bbb
SSDEEP 12288:9Dx3v4vdCwEgt3dYmx0nqsd0q2CS4OrjUiOvqd2E2U9toxYAK+xbaK1A/TCnvek8:P3xSYmx4KJoiOC4Q9ex9p23CX+4Twb
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/meta-index

SHA256 87e75d66805d429cdf4cdd24672b5528cd30c7b0509a3f07c6b78b30ca2a52b1
MD5 378bacf86424af40d102b109176bd37a
SHA1 a218a25f131cbb38f4f11e8eab0602b3aabb81f7
SHA512 f5ea5c89258934c4a12de0cca21c4df05371decf0e9644f218ec3aa3c2d2ad92207bc5119a91b84c3e9f77e9373502ac891154adbb50d6d7cce8dfd30580405e
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/ext/nashorn.jar

SHA256 a253c5b4fbbccb2b631077efe05d47f79775bb3ef40eba9ba9ff31770385fb61
MD5 1a9c32c12e25545ab19cea34602751f6
SHA1 54ce3ea05d0be84196a96fb57f81397d4f2175dd
SHA512 3b3bdb559f2284d4c543a3d2bfe07da32fd52a81e4537e02c919797d0b2b5bd8b1e3dc20be6f8233eee75f1847094e4d0ff6fabb1e060c7c1eae6fd1dee5e8fc
SSDEEP 49152:XxUyUomd8/vSkwoH68mONad7VzNGas4GH5O8w3909:XxUy0Ov8oPmONaNlNl56O8N9
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/sunec.jar

SHA256 ebcf2e5ab04c5bfec85eb3eb06e50fdae71c37494d1710e88aede592e206a41b
MD5 20fbc823d8aa3b5630c4e7c27d4859c2
SHA1 a97fc893b5f318c1cac720221948f364750267dd
SHA512 08a1b337d31eed2b912852f91063afd479432f83d12b3fe9f0b2289be0204860e8e1937b0a00a89a10310a065543cbfa3920ff17c9d30b27c69e8859c77903c6
SSDEEP 768:IeKMpP/p5BZmQEnrn6RDan3fgNOVkJBPz3/DpVpCrKvfkB4SlKAw6pKrQbX0Rru1:I0Rx5e2RDavgNOybz/DXpCrKMNlw6pKu
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/sunjce_provider.jar

SHA256 fad48448372eb9fdaafa5b58bf1e454cdd21abc0427c49b7863406b0a480636d
MD5 64434bcdbe7cb014af8c410c1a96150f
SHA1 610bb6f9998aff0d2a157853c68b76dfcffcf054
SHA512 1dd21e217d6bff95d4f867cbae4af3747525d6f5d21ae30652b7fa91cfabe63e8a5e2d251e1c618a0f9ab8a80539c23294830116a08adccac0119db1bc4ca553
SSDEEP 3072:xpYeweAaSuxcLOJJUfda3oFubxlu4h6Ya5bQpewHrppxGr166Mheg:Mewe9SRfI3MubbK5ssEFSpBMheg
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/sunmscapi.jar

SHA256 7dba1f52c064ff1fd15d66101688868012ed4fb53479d335a06fe6d6473e5572
MD5 00e7558bf9a069c8b517d74e3111b444
SHA1 18fab628361fea9132330646a5a674aac8a10673
SHA512 fcbf1337a91422a39c655b359b27dc9bf97c1ba439de2f86e2dc2565e322ee141cb7db104e059e6a89698edbe7131c348c309d2fa6bd28ce07ba96651fd25138
SSDEEP 768:Cz3WjN7mITYqJFPZf5RojZMkFfg0y+pWrBlfyvOIuQ5hvJKZ0NzRHsVySxmTXZtH:Cz3WjN7mIsqJbw9MUf3yMQ7feORQ5hv/
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/sunpkcs11.jar

SHA256 4613d8d8c7cd75af7267e5e3ebd3b94343d4b96423421f9e5f21b0258f47152f
MD5 fb13da977880e9501472bc1638324519
SHA1 7baddf27f521f16740cea8c2df5a3df5574a6a6c
SHA512 aa71b1e674c2d8dfba33aa20202d1d5fbca5f6f1004de6a033e8b9ddf2b5e0c4093fbd32ad1518811a8dca8c87906be686b5d3048d547329da4714126c6daa62
SSDEEP 6144:Fi1JCrGHSjGwyK3j42tw/ZJu99KEyk2ozKP0dR7:SJCr7qwyQ4Aw/ZJu99KEdjuP0dR7
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/ext/zipfs.jar

SHA256 8c6179a4f23baa57a6109333f684a5bc609fe2d1a475082c089449b5be038793
MD5 3217ce3bb20356f29c2c0c9f05ea7fe9
SHA1 aefb6f9cf555a3e21cb67db54d08a87fee889943
SHA512 6cef435ffce36a23e015c2442a18dadab1ac7ddfb2b70045647524bceee31ece8d9d1159ad47f7c2cc6850732c50996027f42109f18113037c25a7d0fec40d4c
SSDEEP 1536:lSmg6l5vbNk3al1MIeEfqjGWb2iU2jYZnbisGp/N:Qmg6llNxl1leEPuWn2sGr
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/flavormap.properties

SHA256 c2748e07b59398cc40cacccd47fc98a70c562f84067e9272383b45a8df72a692
MD5 d8b47b11e300ef3e8be3e6e50ac6910b
SHA1 2d5ed3b53072b184d67b1a4e26aec2df908ddc55
SHA512 8c5f3e1619e8a92b9d9cf5932392b1cb9f77625316b9eef447e4dce54836d90951d9ee70ffd765482414dd51b816649f846e40fd07b4fbdd5080c056adbbae6f
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/fontconfig.bfc

SHA256 0f2265f0113a757c15d51fa53409d630478378fd0856ef547780b40ac6c87156
MD5 827f00e05f3c5272aef3bf456cf52bf5
SHA1 280ef454a4644d1e17c7afac3b94249ed6bbdcbe
SHA512 f6f4f9b7eeea090081cc0ffe9d2db705f832cf0af9882b00ac97ecae89f8c77a8d62eb6f224d78b7195172edcff74cd21a2459a7ed9cd6ddb29b3cc32398c4bc
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/fontconfig.properties.src

SHA256 d11f039b61bd3698b26f980a63d61f8993e5dead793d7a89e102abd8fb3c4872
MD5 b1caca9200bcc01676c2a524641bc33d
SHA1 9e610a993be3ef7afcb9f7b78291b777bbaab59b
SHA512 fac96a4610fec59539c4219d0ea49b4f6a0c208dec6c767bb27491f37cc4f4f1fff130a64493e287d8a259bb91440e79bf21b51c3b6c0d7cac7a1c0c536cad70
SSDEEP 192:uThf+e6a1nsNi8bTeOiO/Ywca9nB2RwhCdvBMGuo6wj:uThflnHIR9B2Rwhivj
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSans-Bold.ttf

SHA256 2f529a3e60c007979d95d29794c3660694217fb882429fb33919d2245fe969e9
MD5 3c0f650c88f1dd66abf4e2d86b2789b8
SHA1 560e4bcafdebaf29645fbf92633a2ae0d2f9801f
SHA512 8c7f3b9fc97e0789ce4ca1ecd95f3e75a67ffaecd1896373368b8924d740d3e930a10c133ed83e8a6d8160fadafda54400c12fedc9a921b7263e1d0f73f63f81
SSDEEP 3072:lcM77D0fhWtStY60Gn6JkXNUBUdUKHL4I1/Y04+GpZ:KJWYCNIBXSCGKHLa04+4Z
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSans.ttf

SHA256 f51b88945f4c1b236f44b8d55a2d304316869127e95248c435c23f1e4142a7db
MD5 9e94decf013d3e2c9adcc0b97cc5ce44
SHA1 62f2841f61e4be66a0303cd1567ed2d300b4e31c
SHA512 0ac4a03bd238daf68e5f7bb8ff307a8098b839c4c6ede94eb28af5fc8d250905da8a9c77cf9fa8946610e7290fe84b3273184dbf71f0148522384aaee86143ec
SSDEEP 3072:M+b3K4MO6bJa5Tvp1fRtLHRVAnNNaKvv4wKpZ:M+m9OgMxv3fRBHcnnaKvv4wcZ
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSansFallbackFull.ttf

SHA256 97320619b0f1ce4a7cda74cf064a0ce44ef3091287bc42755597e177cccf94c2
MD5 b572afe5d10d92cb5d53e05efaed26e1
SHA1 4a4a38d0dea96cbefd3fd4658b4dbee77956c328
SHA512 125b93d8b1a1ab81ebdf6fe472d61e69be64fc0a4ffb9e74c50026e7385c1e1ff726a612a54a51b54e8245e714349251de9ea6c7304be1e1e083c3d04810b130
SSDEEP 49152:OwRYJGk1Px93OGV/TCEJBiaqpW0c4MDSc/F6b2QU64zcGk6kOyk:AH1z5LbSc/qs
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSansMono.ttf

SHA256 12b552de765dc1265d64f9f5566649930dde4dba07da0251d9f92801e70a1047
MD5 78c0de8abf66567262ee5e4e653fc11c
SHA1 133fb6cf26ea073b456fb557b94ce8c46143b117
SHA512 b109674d8fb6ebd0d040ff8ee9b65fb7183ce4d99a28d85ed8a7232852adb7f9c050ff96546ad0814c5ef79511442333f214c34f5b9c66fb77092e32bc87e2f0
SSDEEP 3072:B3CXpFV/JBpKNSZrYfe4i9VbxSYX3o4Cr:B3CZFV3INSYe4i99AYo4Q
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSansMonoDotted.ttf

SHA256 bf8c5e6b662df177af25226e61c34d6cf6ae23bb39939530347a81a5b5bbffc8
MD5 2532adf29ae0fdd2e016959ed5123086
SHA1 808f6c55a493513676f824d644e12d4f9ca661a4
SHA512 ee6650e763f3bc84e8844b1bb3ed73e2734d9156d970c6f1f5b04dce129d38cdeecd7430f03f8b552c02d94ef1c0fa8875839a4037f3968756c5a0258f4dab64
SSDEEP 3072:7+pJ11achCpl19F6HN2eUebsKyDbgxmboWU:7+z114Xm2eUyhyUmboWU
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSansMonoSlashed.ttf

SHA256 01550d67b4c7a8c113da222a26f0e77f39d9fe2264369c7cc2d8f6962682be35
MD5 d5540faa206983c791843a3a55e3cb98
SHA1 715214e5045d738234eef9724799f3061db75b40
SHA512 c3ccf669c0a2ef443aa63c58324de81b1c9833b7d05f503a2aa153d3ee56c393da3f7b9f417694fddd2deb4e06759a1e2b611f06aaa2209ae6108365ae4262e9
SSDEEP 3072:TAJ11achCpl19F6HN2eUebsKyDbgxmbo4H:To114Xm2eUyhyUmbo4H
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSerif-Bold.ttf

SHA256 c746c6383a03effbcad6ccb028e4b39e87071ff1a146a24fb2110a23e05776bb
MD5 3b6c3214b028debd9f175b63f71508e0
SHA1 294fa99ceaf6077ab633b5a7c7db761e2f76cf8c
SHA512 35108ca1ec9ea95aec8161ded836c6464014318828fd7f5fe09f85ecb04054ffd9780a59a094a98e544a6a7a617def558c7a5afd3ee82a7930ced6e8fc16427d
SSDEEP 3072:iSJZesxZ8IvIuUY+nrBDCMf4IETHhbsYd7UVViiFfW3SOGxL47ybJVu:ioZjjUYUBB3E7hbBQZW3exL4ebJVu
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSerif-BoldItalic.ttf

SHA256 1aba99421b31afe890182663270c28bc619f00d8746234da3dda054cd5bf09b0
MD5 1f5dc2bf62705a7d09533b1538c9c173
SHA1 b7f2d37c3a062be671774ff52f4fd95cbef813ce
SHA512 7f67257fb4f19b4b240c21054433655b653584a1cd98198ddab78ae2eb34db29731f5844b133446138d1df5b4ef4e966ff28abbebbc5aec10b6419586608d9d8
SSDEEP 3072:Qsoij4exRRzvzlpW7NrpyTorMc+5gBJF/kwqAPBi7HSMF/Z34qybJYt:MUbzvjgNlIEfs1AYDSMF/Z34XbJYt
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSerif-Italic.ttf

SHA256 02c0108dea583e393fbcbec39c7093e9a3095a09d65e37fafff9a9b7a89123a4
MD5 1262ad9a9f243ef2e7c80c0bb5f0060d
SHA1 bdd8aad5e6ac546d11e7378bdfabeac7ccbdadfc
SHA512 493c81d81e258c0e0be32e2e76c840fa523504201e801a8bb4e5e2f769af36f677486c17dad504f4812d161db7e83f58890ae4d79939ca39c27664ac4409d9d6
SSDEEP 3072:9sIQKPhrrz85GRmS4UJoBiY89AFi09mGotPcKmnnsr41ybJYt:9sIQ0FmPUmBiY8UijtPc1n04EbJYt
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/DroidSerif-Regular.ttf

SHA256 ae32140265dbe0dfde24b9abd222be9210a531888f014ff9b2326aba2d6fd777
MD5 e18165ce2b700b1b4daca82e276fcac5
SHA1 805c5f975e02f488fa1dd1dd0d44ed4f93b0fab4
SHA512 cf48d4ea1289953f906e510d114633300193144e7aa24d9c33c3dba2088ad8283efdd668c9888f9bdfe75296a662bb094d46f8aa847910894bb066aa4df4b9ef
SSDEEP 3072:AIVimyEc4ealpgp9uQEB00KYlnrum5hF8wkEf3OnfZqPdkh4LybJVu:RirEc4eyDHuyFRPOcPdkh4ObJVu
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/fonts/LICENSE.txt

SHA256 dc10240d624439c237432831e891c562fd74ff2802918ef5d8aec630c5c00da6
MD5 66db08a9624d51650b3272bb6caccd3e
SHA1 bf19ffd6bb2bf94cb823be8106558fe872f592a0
SHA512 0bc9d731314cae2cd7585286129d19798eee75c2de764086dd36f25af47977980bf2b24dbfef29096fff6756e2cacc36085b3c66aad92509a2b208d595199b8c
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/fonts/font.conf

SHA256 10be692d96ca5b3abc7bff76685c777e62d3e8db5e1628d83ddcabbc141df2a5
MD5 34bb62687693a1aa965440d894fb01af
SHA1 5f8a438fe9e0f0750e4cc844f99bcc87d9288c69
SHA512 5e97a086ba0e17e687112c446f70785aea0b3abee8eddb3910f8b92632d930ec8a99185e6e8552f5c7cd928b1bde1743923c5d04422d2995433017662314f65f
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/hijrah-config-umalqura.properties

SHA256 3456982de9eba535337852f02852e26e4ed197ebd9d8356977e6da4ed9075538
MD5 7b451352f9f9eac657d963c5d2921dda
SHA1 d8c664ac3e18a044465b4f76311661a4f7f045a2
SHA512 822be7d4e40408dcb0788efc521fb13eaf3650db4f934cfbd37d00c0026d35d254cf415d5ad7273c78fced84a582bccf101e413c0686095cdde4bfa93f883e13
SSDEEP 96:S8ThI1EgZass+YXdGOS8NhN9Yd9Yq67IwOYUuUS9O0:bThpyJO/BFi9YqAInYUuUmO0
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/images/cursors/cursors.properties

SHA256 7b8b63f78e2f732bd58bf8f16144c4802c513a52970c18dc0bdb789dd04078e4
MD5 269d03935907969c3f11d43fef252ef1
SHA1 713acb9eff5f0b14a109e6c2771f62eac9b57d7c
SHA512 94d8ee79847cd07681645d379feef6a4005f1836ac00453fb685422d58113f641e60053f611802b0ff8f595b2186b824675a91bf3e68d336ef5bd72fafb2dcc5
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/invalid32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_CopyDrop32x32.gif

SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
MD5 89cdf623e11aaf0407328fd3ada32c07
SHA1 ae813939f9a52e7b59927f531ce8757636ff8082
SHA512 2a35311d7db5466697d7284de75babee9bd0f0e2b20543332fcb6813f06debf2457a9c0cf569449c37f371bfeb0d81fb0d219e82b9a77acc6bafa07499eac2f7
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_CopyNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_LinkDrop32x32.gif

SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
MD5 694a59efde0648f49fa448a46c4d8948
SHA1 4b3843cbd4f112a90d112a37957684c843d68e83
SHA512 cf2dfd500af64b63cc080151bc5b9de59edb99f0e31676056cf1afbc9d6e2e5af18dc40e393e043bbbbcb26f42d425af71cce6d283e838e67e61d826ed6ecd27
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_LinkNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_MoveDrop32x32.gif

SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
MD5 cc8dd9ab7ddf6efa2f3b8bcfa31115c0
SHA1 1333f489ac0506d7dc98656a515feeb6e87e27f9
SHA512 9857b329acd0db45ea8c16e945b4cfa6df9445a1ef457e4b8b40740720e8c658301fc3ab8bdd242b7697a65ae1436fd444f1968bd29da6a89725cdde1de387b8
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/images/cursors/win32_MoveNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/jce.jar

SHA256 1e1ed28500c103b78f5438a316a637c1dd1ccabfb3b22a05b2fb3acc6bf906cb
MD5 246c7ab76825f9d6e48bd09ced04334f
SHA1 6d4d59bb9a14cf35b70b28a4ad9472a7231cc8d6
SHA512 57aa54b677aaa49ec21b5c246fb5985933cba21172985ec010cb20bef5b7aa688e0226825c58abb0c15a87cab4702e29320aa4347725eb39d22dccd15f1a75ce
SSDEEP 1536:etPEqwoJ8sYaFLoEyuDuxYot6se6sgx8xbZC/VdEU0w/Y7upyRGv7JfBPvzFGpDK:6TpduxY2Ggx8B8VdLNyRGFv
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/jsse.jar

SHA256 2345d390bd54ccf3751721d291dc528a0722c8f310a7b8ac10cc7e1c5309e174
MD5 568045be8ac3cbe907c1f0d8d072238f
SHA1 21371aa4d7842c020bc578e0d2aae2c05dc0578a
SHA512 e31204eff6805453a0b77fa317e18f3c99a29fad0945f13b5688f277a3ff05a0aebf444347f99cb00e44ab9fb4e20344515072b77b7ee98a2daa0d72f6465c8f
SSDEEP 6144:QwI43HSsAkwhVG2PUJvcRaFtagDff7/FsBa2G+DfAMNTq:QwF3WRDRaig3aaS6
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/jvm.hprof.txt

SHA256 b055bf25b07e5ac70e99b897fb8152f288769065b5b84387362bb9cc2e6c9d38
MD5 c677ff69e70dc36a67c72a3d7ef84d28
SHA1 fbd61d52534cdd0c15df332114d469c65d001e33
SHA512 32d82daedbca1988282a3bf67012970d0ee29b16a7e52c1242234d88e0f3ed8af9fc9d6699924d19d066fd89a2100e4e8898aac67675d4cd9831b19b975ed568
SSDEEP 96:CYrYJDrYJ+RvJ3z3d9uGG7hPxTRnhTbraYfwE5DyK:CYrsDrsgvJ3z3buGG7LvSmhDz
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/logging.properties

SHA256 ce1688fe641099954572ea856953035b5188e2ca228705001368250337b9b232
MD5 809c50033f825eff7fc70419aaf30317
SHA1 89da8094484891f9ec1fa40c6c8b61f94c5869d0
SHA512 c5aa71ad9e1d17472644eb43146edf87caa7bccf0a39e102e31e6c081cd017e01b39645f55ee87f4ea3556376f7cad3953ce3f3301b4b3af265b7b4357b67a5c
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/management-agent.jar

SHA256 faaebce5a3534f35ae28f6f2f907728b1ff62df20ab0f22a7dab1bcd967aaba4
MD5 782e4f554ebeb692fd888e3a40678602
SHA1 b62df61e15cdf3f138a2a8e601696d5332954f3e
SHA512 99c19aa9923588631afe2f23220cc36fa5af049b26f4a52b69a79970e432bc98b8ef967047f087b05e950f4e98c763dad613cac7699ae8d8cda3b8891ba3db61
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/management/jmxremote.access

SHA256 439158eb513525feda19e0e4153ccf36a08fe6a39c0c6ceeb9fcee86899dd33c
MD5 f63bea1f4a31317f6f061d83215594df
SHA1 21200eaad898ba4a2a8834a032efb6616fabb930
SHA512 de49913b8fa2593dc71ff8dac85214a86de891bedee0e4c5a70fcdd34e605f8c5c8483e2f1bdb06e1001f7a8cf3c86cad9fa575de1a4dc466e0c8ff5891a2773
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/management/jmxremote.password.template

SHA256 3d83e336c9a24d09a16063ea1355885e07f7a176a37543463596b5db8d82f8fa
MD5 7b46c291e7073c31d3ce0adae2f7554f
SHA1 c1e0f01408bf20fbbb8b4810520c725f70050db5
SHA512 d91eebc8f30edce1a7e16085eb1b18cfddf0566efab174bbca53de453ee36dfecb747d401e787a4d15cc9798e090e19a8a0cf3fc8246116ce507d6b464068cdb
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/management/management.properties

SHA256 3a923735d9c2062064cd8fd30ff8cca84d0bc0ab5a8fab80fdad3155c0e3a380
MD5 5edb0d3275263013f0981ff0df96f87e
SHA1 e0451d8d7d9e84d7b1c39ec7d00993307a5cbbf1
SHA512 f31a3802665f9bb1a00a0f838b94ae4d9f1b9d6284faf626ebe4f96819e24494771a1b8bfe655fd2da202c5463d47bae3b2391764e6f4c5867c0337aa21c87c1
SSDEEP 384:Fqsmpsj42wbZTHV+Dq3xtP3xPqaNC/R1a:wsmpsjL0ZTHV++3xtpi68Xa
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/management/snmp.acl.template

SHA256 f1dc97da5a5d220ed5d5b71110ce8200b16cac50622b33790bb03e329c751ced
MD5 71a7de7dbe2977f6ece75c904d430b62
SHA1 2e9f9ac287274532eb1f0d1afcefd7f3e97cc794
SHA512 3a46e2a4e8a78b190260afe4eeb54e7d631db50e6776f625861759c0e0bc9f113e8cd8d734a52327c28608715f6eb999a3684abd83ee2970274ce04e56ca1527
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/meta-index

SHA256 26f8fed8b8726e3a893fef2bab0d224ea0048b19f2e40e3e45b9160a18d3a9cb
MD5 c342df5c8f2f614291f7166751716ddd
SHA1 543fa6d30f7906041b8d989fb14dbe4615d86bf3
SHA512 da3173b7de316291540eeb049290c1906c3e8e36bbbb1b686f226ca9d7f2eb67ce33264b9f20023f375715435428c2cef1161e3c406064da95cb4e68d11e363a
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/net.properties

SHA256 16c93910b2785e7cbdda90d5479aa9687148c2141ac0adbd0277fde284f6bbb3
MD5 2fe77cd007d99dde926a22094e333e0e
SHA1 6587f43b93527dd17abcd5699eb9682b6f08c09b
SHA512 33d32b1c50bafc4bcee1d97d81176e3c9ff6b316536a7a88f76db92781b4acb716cc9ff75a97ab32f4469838b370a8df54b2e2f5fe97f0873b8a44cd2b848faa
SSDEEP 96:VAcEvEtGObfObz3Obm0ObPOn23CO0V+r/aJ7SFs:PEGG4f4z34m04PeBm27Si
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/psfont.properties.ja

SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
MD5 d4c735bf5756759a1c3bc8de408629fc
SHA1 67c15e05a398b4ce6409d530a058f7e1b2208c20
SHA512 8124b25decfa64a65433ff2ce1f0f7bdf304abe2997568abc35264a705f07152aa993b543da37c4132b4b1b606743c825c90a0eb17b268518d478f5cf0889062
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/psfontj2d.properties

SHA256 780c565d5af3ee6f68b887b75c041cdf46a0592f67012f12eeb691283e92630a
MD5 17b15d370018acc01550175882c7da91
SHA1 4edd9e0fc3d30fbdcabcdcaab3bc0b3157fc881e
SHA512 e4ee92d4598385cb2f6f3a4db91ddabd7e615dc105ed26cdc5b5598d01c526cea7726ff93f92a308350229f2e5a5dd64cc0c38865dd97666368a330b410d4892
SSDEEP 192:FTh7Pwn+Cyub3Ee4OECKDIcYOhAgZ50OKDQLT2IcpRuWRbHr9NRXUh/QTv9Ho39I:FThTxzubEFOEscAW5VKsCfHz8RPxGt
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/resources.jar

SHA256 840cc475f442a088f0e27cdc6c3052a935974f8c36e01b8d94f4cb874f7945cb
MD5 78e4be7cfd842fb8cbd700854302d72b
SHA1 21fc4a8170c69f0fb9551ff01980a85c7c93f804
SHA512 a60123f57dd2511916758cd54c88957251a37190287fcce00644c1eb5c064c0bde826c43a28d3c1561e234e2d8ed41175599b426b0ecb10c31e9f7f4a52c7f7e
SSDEEP 49152:z5GFY9/vFIDSYVb+Hfy2uQkik4LSRcbzXJIQ3E9+vTIRY6NdjEN3OHZgJtMl/DfA:jn
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/rt.jar

SHA256 2c86fb08e5c78dc6c46fa84211d51676758c5acb449510956056bd21e15df787
MD5 03e2ad4de40aa62fd931b9008c8ea3a6
SHA1 6f00404d9579b86f2db803788f463c565de79a98
SHA512 b90f4c08f19407c50a6ad0052cdf23a5af5e199bd7b91236cad2deb6b473a81c667bad0e5d14f8605c6a0f919ba99ea275ea784aa26b95f0670cfdc711d94ccc
SSDEEP 393216:J1fyszzINS2+1rc2hCu85mKwYgB3OFIO9dXUTjjSQ:J1fysYQ2qIu85mKwYgB3OFIO9dXUTjjP
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/security/blacklisted.certs

SHA256 ddd297102146ac7f6607b35c0e0b565975739a7841da5e5a6207b6f4ebb2d822
MD5 b9c358f9d668e86fda8048982e741acc
SHA1 8870bef548310b648ef044db40c5ec609f896f0b
SHA512 91ced5411767fba041b950ad46f71a19f5dd48af3d2199da835d6cb9062ab80076a961d1f91856d74dbb0e037b092729d065204a74e113c914b33cd9b2f714b7
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/security/cacerts

SHA256 a9263831583dfd58bc3584aa0b13e6cde43403fb82093329b47bb65a8c701afb
MD5 a2c167c8e0f275b234cb2c2e943781c7
SHA1 2a6b5fbc476ea3a5ddfb4bf1f6cdf0c4da843bb1
SHA512 8a0c2240c603210ae963c6a126d19bf51659fded2228503bbf2a2662ccb73b0f9e18c020c9e5e2f3449e2f4f0006d68fe15c8fd5d91dee8a1a6b42a49183beaa
SSDEEP 1536:knYlyRHbLD1Syx011lYcdSmjbDKuaG8QlpzHok0SeHX:knYlyRHrq5dbeO9pLD0SiX
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/security/java.policy

SHA256 b8582889b0df36065093c642ed0f9fa2a94cc0dc6fde366980cfd818ec957250
MD5 11340cd598a8517a0fd315a319716a08
SHA1 c0112209a567b3b523cfed7041709f9440227968
SHA512 2b6dadc555eeb28dc1c553ab429f0cb9e3ad9aa64dfa2b62910769a935a1e6030a7ff0dde2689f29c58d1b0720416d6b99ffa19bd23e6686efb1547afb7dccfd
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/security/java.security

SHA256 c56569b60130f0912e761914c6a6e41fac0afee692260dbfc629318e29c9179f
MD5 3053ad53c722b2850ecc513b7e7b0e9f
SHA1 571377af09aedd9cae69a951d26b7666d6fc56db
SHA512 4dc4fda0f36d11a376d4830b98d970c4239d32b1f2424a73188db1539efabb21472257840a9ea09d3a3cc3dba87f5b97e4943a3e8a2d13f817a08580021b501c
SSDEEP 768:Y8obod6U3O5O9WgvY+JuN2gvkMpCb/qWWHoR9Q693jfGgqc3S:Y2TMUb/qWWIoC6hci
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/security/policy/limited/US_export_policy.jar

SHA256 51786cff2e31e6c1390343efeee9fb3884b59b8c7ea83f7177bdee9136afe7e8
MD5 79a50fff2e5dc66def24222cca2a37df
SHA1 b5318606c5e7ee6038d77ef12cf1b7b8c5b61ce6
SHA512 8fbfc57cb463377fb1b7ed2bef475866a1da79e505b226f106029b8e1419fdd2d5c6b8bb27b23985b80da2e32d27391a8cd27c4026f7f7fe5672fd3f09c649eb
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/security/policy/limited/local_policy.jar

SHA256 d5e2cb646325ac507c8e6cf33b618ceb9b7de5bf7371f0cf1855f1287ef802fd
MD5 0ed182e980b208164de32889bcae0d3e
SHA1 157d57a78c82d0288974be8ff5f3c4dd03bbe398
SHA512 2d1e054b49f961120f7b562f540ba26bc926e7b6318e7ac776a435d666454fbbb5a33ea8486098b67e45012064cfbf88c4205e4d6f505ce015da7f9bb4b75883
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/security/policy/unlimited/US_export_policy.jar

SHA256 51786cff2e31e6c1390343efeee9fb3884b59b8c7ea83f7177bdee9136afe7e8
MD5 79a50fff2e5dc66def24222cca2a37df
SHA1 b5318606c5e7ee6038d77ef12cf1b7b8c5b61ce6
SHA512 8fbfc57cb463377fb1b7ed2bef475866a1da79e505b226f106029b8e1419fdd2d5c6b8bb27b23985b80da2e32d27391a8cd27c4026f7f7fe5672fd3f09c649eb
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/security/policy/unlimited/local_policy.jar

SHA256 73f5e179fdb006dfb64c5248a755efc67556a8849cbb3c604911a976441f9124
MD5 63c3e6eff986944e301d2a66ff8f4253
SHA1 2f587fc66692b55d2401aff84b4b0bca080a1326
SHA512 445489a194749c4c839ba5b2b34ddbab42ad9e5694a8953561480bbf33ba7165074cdc659d2f0b90a5a53dba72f0203795d9b8b1f0c4b3ffe34727ed09b627f6
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/sound.properties

SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
MD5 4f95242740bfb7b133b879597947a41e
SHA1 9afceb218059d981d0fa9f07aad3c5097cf41b0c
SHA512 99fdd75b8ce71622f85f957ae52b85e6646763f7864b670e993df0c2c77363ef9cfce2727badee03503cda41abe6eb8a278142766bf66f00b4eb39d0d4fc4a87
MD5 SHA1 SHA512

SpyLogger V1.1/res/lib/tzdb.dat

SHA256 91020b724212fd02a552534c5b8a9af52258293d4027be2a1e27c56298bc557b
MD5 81af1c59dbf6f4b1b9984d7a391d068e
SHA1 78e4770726d075861da20f4bf6a822e677e8dc13
SHA512 96bdc563c0cb55a1f1795ca8e3bc0a4edb9e285d1afc4a2cbf6143748ba1fdfa53e19cee63b596ffadc433451363bee96ffc66f2806b075ff9c954839973c0e7
SSDEEP 1536:/0UKmE9UPOLn+hkpoVjTMB0q/////0l7asH3RX9rUVsuqmot09gDtz:/Cr+iaVfqsH3RNr6suql+9gD1
MD5 SHA1 SHA512 SSDEEP

SpyLogger V1.1/res/lib/tzmappings

SHA256 d936ee24810b747c54192b4b5a279f21179fe3ceb42d113d025a368ebb7cb5a7
MD5 7d4abbcfb06d083f349e27d7e6972f3c
SHA1 eb91253590526f7be7415839ccbf702683639c8c
SHA512 e5c2fbbc07cd53baf14f3cc239b56b42b73de47f9b7904aabf7d97695d2ab8866d0c8179235cbf022245949b9b8e419985e328aa5ed333b14b8b4de2c82b225e
SSDEEP 192:qwfOC9OYOxUmHomjgDwlZ+TFXsq2H+aUHCHQj4mEo:qqgniTyq0iV
MD5 SHA1 SHA512 SSDEEP

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

SpyLogger.V1.1.rar

SpyLogger V1.1/Guna.UI2.dll

PE Signature issue

mscoree

dotnet

SpyLogger V1.1/MetroSet UI.dll

mscoree

dotnet

SpyLogger V1.1/Newtonsoft.Json.dll

PE Signature issue

mscoree

dotnet

SpyLogger V1.1/Newtonsoft.Json.xml

SpyLogger V1.1/SpyLoger.exe

generic

SpyLogger V1.1/SpyLoger.exe.config

SpyLogger V1.1/SpyLoger.pdb

SpyLogger V1.1/res/ASSEMBLY_EXCEPTION

SpyLogger V1.1/res/LICENSE

SpyLogger V1.1/res/THIRD_PARTY_README

SpyLogger V1.1/res/bin/JAWTAccessBridge-64.dll

jawt

msvcr100

kernel32

generic

SpyLogger V1.1/res/bin/JavaAccessBridge-64.dll

kernel32

user32

msvcr100

generic

SpyLogger V1.1/res/bin/WindowsAccessBridge-64.dll

kernel32

user32

generic

SpyLogger V1.1/res/bin/apksigner.jar

SpyLogger V1.1/res/bin/apksigner/certificate.pem

SpyLogger V1.1/res/bin/apksigner/key.pk8

SpyLogger V1.1/res/bin/apksigner/testkey.pk8

SpyLogger V1.1/res/bin/apksigner/testkey.x509.pem

SpyLogger V1.1/res/bin/attach.dll

java

advapi32

psapi

msvcr100

kernel32

generic

SpyLogger V1.1/res/bin/awt.dll

kernel32

jvm

java

advapi32

msvcr100

oleaut32

d2d1

generic

SpyLogger V1.1/res/bin/certificate.pem

SpyLogger V1.1/res/bin/dt_shmem.dll

msvcr100

kernel32

generic

SpyLogger V1.1/res/bin/dt_socket.dll

ws2_32

msvcr100

kernel32

generic

SpyLogger V1.1/res/bin/fontmanager.dll

freetype

java

advapi32

user32

gdi32

awt

msvcr100

kernel32