home

javaw.exe

Java Platform SE 6 U20

Sun Microsystems, Inc.

This is installed with multiple programs including Java(TM) 6 Update 20.
Publisher:
Sun Microsystems, Inc.  (signed and verified)

Product:
Java(TM) Platform SE 6 U20

Description:
Java(TM) Platform SE binary

Version:
6.0.200.2

MD5:
4e8cc8bdebed5ad93539612d4d316fdf

SHA-1:
e7512a139bc73ca82941df7f99dcc22d6151bccc

SHA-256:
bebae3ec309386fd3e601c3ad5f9116a97c3791cfb7b8b7558b946e45e7249f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:47:35 PM UTC  (today)

File size:
141.8 KB (145,184 bytes)

Product version:
6.0.200.2

Copyright:
Copyright © 2004

Original file name:
javaw.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\java\jre6\bin\javaw.exe

Digital Signature
Signed by:
Sun Microsystems, Inc.

Authority:
VeriSign, Inc.

Valid from:
5/24/2009 7:00:00 PM

Valid to:
7/14/2012 6:59:59 PM

Subject:
CN="Sun Microsystems, Inc.", OU=Sun Microsystems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Sun Microsystems, Inc.", L=Palo Alto, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0F3DAAC815F6789999223A8083B44BF5

File PE Metadata
Compilation timestamp:
4/12/2010 5:03:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1536:61EQWowhnIR0is1geOjihV6uhkYUSzcAx1Itw0lM8eUnqWygKkPlBTNS7qjh3rmu:61Gny0is1iygSw01IZ1yePlBpFjZqMN5

Entry address:
0x894C

Entry point:
6A, 60, 68, B8, 54, 41, 00, E8, 38, 25, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 3C, 4C, 00, 00, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 94, 30, 41, 00, 8B, 4E, 10, 89, 0D, 7C, 9E, 41, 00, 8B, 46, 04, A3, 88, 9E, 41, 00, 8B, 56, 08, 89, 15, 8C, 9E, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 80, 9E, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 80, 9E, 41, 00, C1, E0, 08, 03, C2, A3, 84, 9E, 41, 00, 33, F6, 56, 8B, 3D, 68, 30, 41, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Entropy:
6.2766

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
72 KB (73,728 bytes)

Shell Open Command
Open type:
jarfile

Command:
"C:\Program Files\java\jre6\bin\javaw.exe" -jar "%1" %*


Windows Firewall Allowed Program
Name:
C:\Arquivos de programas\Java\jre6\launch4j-tmp\Stanza.exe


The file javaw.exe has been discovered within the following programs.

Applied Biosystems ViiA 7 Software  by Life Technologies
www.lifetechnologies.com
About 1% of users remove it
Bizagi Process Modeler  by Bizagi Limited
www.Bizagi.com
About 1% of users remove it
Blackboard Drive  by Blackboard Inc.
www.xythos.com/home/xythos/products/xythos_xd.html
About 2% of users remove it
ERDAS IMAGINE 2011  by ERDAS
www.erdas.com
About 1% of users remove it
Java Web Start  by ORACLE
Using Java Web Start technology, standalone Java software applications can be deployed with a single click over the network. Java Web Start ensures the most current version of the application will be deployed, as well as the correct version of the Java Runtime Environment (JRE).
www.oracle.com/technetwork/java/javase/overview-137531.html
11% remove it
Java(TM) 6 Update 20  by Sun Microsystems, Inc.
Publisher's description - “Java SE 6 features and enhancements to the platform.”
java.com
About 9% of users remove it
Merlin  by MerlinOne Inc.
About 7% of users remove it
Mindjet MindManager 2012  by Mindjet
www.mindjet.com/de
About 5% of users remove it
Mindjet MindManager 9  by Mindjet
www.mindjet.com
About 9% of users remove it
QMobile Android PCTool  by QMobile
Publisher's description - “Q Mobile PC Tools That Help You For Connect With Your Q Mobile device. Q Mobile is Pakistan's quality brand that offers its users affordability and reliability all at once.”
www.QMobile.com
21% remove it
 
Latest 20 of 17 programs
Powered by Should I Remove It?

The file javaw.exe has been seen being distributed by the following 4 URLs.

ftp://200.125.161.202/AMS/jre/.../javaw.exe

http://es.originaldll.com/.../18885.exe

http://de.originaldll.com/.../18885.exe

http://originaldll.com/.../18885.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.