Windows Analysis Report
CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar

Overview

General Information

Sample Name: CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar
Analysis ID: 679298
MD5: 8535942f58ba61ce5ce0755d7570f22f
SHA1: fb6c95fa16c2e91f22ac4e8d73233962e645c6bd
SHA256: 308dcf6540932d062dd10a24fefd25d6660afe60dea76c9fa5612ae0f4cb4cda
Tags: jar
Infos:

Detection

Score: 56
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Multi AV Scanner detection for submitted file
Exploit detected, runtime environment starts unknown processes
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Uses cacls to modify the permissions of files
Uses code obfuscation techniques (call, push, ret)
Creates a process in suspended mode (likely to inject code)
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Classification

AV Detection
barindex
Multi AV Scanner detection for submitted file
Source: CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar Virustotal: Detection: 11% Perma Link
Source: CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar ReversingLabs: Detection: 12%
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior

Software Vulnerabilities
barindex
Exploit detected, runtime environment starts unknown processes
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/3
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/allow-java-encodings
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/continue-after-fatal-error
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/continue-after-fatal-error=
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/create-cdata-nodes
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/create-cdata-nodesw
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-decl
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-decl:
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-declc?m
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/create-entity-ref-nodes
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/defer-node-expansion
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/defer-node-expansion9
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/defer-node-expansionS
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/include-ignorable-whitespace
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/include-ignorable-whitespace/
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/generate-synthetic-annotations
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/generate-synthetic-annotations9
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/honour-all-schemaLocations
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/honour-all-schemaLocations#
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/honour-all-schemaLocations;
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/include-comments
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/include-comments0
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/parser-settings
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/tolerate-duplicates
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only/
Source: java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/namespace-growth
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtd
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtd:
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtdStm
Source: java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refs
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refs
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refs3
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refsctm
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformant
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformant2
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformantc
Source: java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validate-annotations
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validate-annotations#rm
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-trees
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.370705608.00000000158A1000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-treesag1
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/dynamic
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.370705608.00000000158A1000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/dynamicg/apach
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking3
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking=
Source: java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/augment-psvi
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-default
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-defaultA
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/normalized-value
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-duplicate-attdef
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-undeclared-elemdef
Source: java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydef
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydefS
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-base-uris
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-language
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude1
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/current-element-node
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/document-class-name
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/document-class-name$
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/document-class-nameC
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/input-buffer-size
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/input-buffer-size3
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory:
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factoryC
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scanner
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scannerCtm
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-processor
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-processor5
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-processorS
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scanner
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scanner8
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scannerS
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager8
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-resolver
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-resolverc
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-handler
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-handler6
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporter
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporter:
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/grammar-pool
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/grammar-pool6
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-binder
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-binderSvm
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-context
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-contextl
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/stax-entity-resolver
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/stax-entity-resolverS
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-table
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-table3
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-tableQ
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation-manager
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation-managerF
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation/schema/dv-factory
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation/schema/dv-factory7
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd:
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/schema
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/schema3
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/scheman
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/xinclude-handler
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/xinclude-handlerC
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/locale
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation?
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-schemaLocation
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-schemaLocationS
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/security-manager
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/security-manager#
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/security-managerSym
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/xmlschema/1.0/anonymousTypes
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/xmlschema/1.0/anonymousTypesva/lan
Source: java.exe, 00000007.00000002.403347809.000000000A760000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://bugreport.sun.com/bugreport/
Source: java.exe, 00000007.00000003.379134501.0000000015E45000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402244664.0000000005595000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.403032147.000000000570B000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402189718.0000000005577000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://ipinfo.io/
Source: java.exe, java.exe, 00000007.00000003.379134501.0000000015E45000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402244664.0000000005595000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.403032147.000000000570B000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402189718.0000000005577000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://ipinfo.io/ip
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://ipinfo.io/ipss
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://ipinfo.io/ss
Source: java.exe, 00000007.00000002.403396392.000000000A767000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.oracle.com/
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.400589760.0000000005210000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402980245.00000000056EB000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402090808.0000000005546000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/dtd/properties.dtd
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/dom/properties/
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.400589760.0000000005210000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/dom/properties/ancestor-check
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/dom/properties/n(
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaLanguage
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaSource
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaSourcehc
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/report-ignored-element-content-whitespace
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/report-ignored-element-content-whitespace3
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/report-ignored-element-content-whitespacez
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/dom/DOA
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/ignore-external-dtd
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/reader-in-defined-state
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/reader-in-defined-stateType;Z)
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/report-cdata-event
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/feature/secure-processing
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/feature/secure-processing3
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalDTD
Source: java.exe, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalDTD;
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalSchema
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalSchema#
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/m3
Source: java.exe, 00000007.00000002.403032147.000000000570B000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402334430.00000000055B2000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/feature/use-service-mechanism
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/elementAttributeLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/elementAttributeLimitI
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityReplacementLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityReplacementLimit9
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityReplacementLimitC
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/g/w3c/
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/getEntityCountInfo
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxElementDepth
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxElementDepthCheckinC
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxGeneralEntitySizeLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxGeneralEntitySizeLimitlStan7
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxOccurLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxOccurLimittE
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxParameterEntitySizeLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxParameterEntitySizeLimitGen9
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxParameterEntitySizeLimitS
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxXMLNameLimit
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxXMLNameLimitDecl
Source: java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/totalEntitySizeLimit
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/totalEntitySizeLimitc
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/totalEntitySizeLimits
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/xmlSecurityPropertyManager
Source: java.exe, 00000007.00000002.400624014.0000000005224000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTD
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTD=
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTDsym
Source: java.exe, 00000007.00000003.379172780.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407385906.00000000157CD000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379104781.00000000157C6000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/even
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/external-general-entities
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/external-parameter-entities
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/external-parameter-entitiesCum
Source: java.exe, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespace-prefixes
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespace-prefixes(
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespace-prefixes3
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespaces
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespaces&
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/use-entity-resolver2
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/use-entity-resolver2Cwm
Source: java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407666815.0000000015887000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.379034574.000000001582E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/validation
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/validationC
Source: java.exe, java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/
Source: java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/(
Source: java.exe, 00000007.00000002.402573664.0000000005635000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.407452137.0000000015805000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378537747.00000000157E6000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000002.402937925.00000000056D0000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378883229.000000001580E000.00000004.00000800.00020000.00000000.sdmp, java.exe, 00000007.00000003.378738079.00000000157FE000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/xml-string
Source: CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar Virustotal: Detection: 11%
Source: CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar ReversingLabs: Detection: 12%
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe File created: C:\Users\user\AppData\Local\Temp\hsperfdata_user Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Section loaded: C:\Program Files (x86)\Java\jre1.8.0_211\bin\client\jvm.dll Jump to behavior
Source: C:\Windows\System32\7za.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: java.exe String found in binary or memory: sun/misc/Launcher$BootClassPathHolder$1
Source: java.exe String found in binary or memory: yhttp://apache.org/xml/features/nonvalidating/load-external-dtd
Source: java.exe String found in binary or memory: -addReference
Source: java.exe String found in binary or memory: }nonvalidating/load-external-dtd
Source: classification engine Classification label: mal56.expl.evad.winJAR@25/12@0/0
Source: unknown Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar"
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\7za.exe 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar"
Source: unknown Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c java.exe -jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" i >> C:\cmdlinestart.log 2>&1
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe Process created: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe java.exe -jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" i
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Windows\SysWOW64\icacls.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic CPU get ProcessorId
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic bios get serialnumber
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get name
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get UUID
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c ver
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\7za.exe 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" Jump to behavior
Source: C:\Windows\System32\cmd.exe Process created: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe java.exe -jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" i Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic CPU get ProcessorId Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic bios get serialnumber Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get name Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get UUID Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c ver Jump to behavior
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32 Jump to behavior
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1792:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4252:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5772:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3996:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3280:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3920:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5312:120:WilError_01
Source: C:\Windows\SysWOW64\wbem\WMIC.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT ProcessorId FROM WIN32_PROCESSOR
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior
Uses code obfuscation techniques (call, push, ret)
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E605F push eax; retf 7_3_157E606D
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157EC1DF pushad ; ret 7_3_157EC1E9
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E6154 push eax; retf 7_3_157E6155
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E624F push eax; retf 7_3_157E6281
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E6330 push eax; retf 7_3_157E6331
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E622C push eax; retf 7_3_157E622D
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E601C push eax; retf 7_3_157E601D
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E605F push eax; retf 7_3_157E606D
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157EC1DF pushad ; ret 7_3_157EC1E9
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E6154 push eax; retf 7_3_157E6155
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E624F push eax; retf 7_3_157E6281
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E6330 push eax; retf 7_3_157E6331
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E622C push eax; retf 7_3_157E622D
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Code function: 7_3_157E601C push eax; retf 7_3_157E601D
Uses cacls to modify the permissions of files
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\wbem\WMIC.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Source: C:\Windows\SysWOW64\wbem\WMIC.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT SerialNumber FROM Win32_BIOS
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Source: C:\Windows\SysWOW64\wbem\WMIC.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT ProcessorId FROM WIN32_PROCESSOR
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)
Source: C:\Windows\SysWOW64\wbem\WMIC.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Name FROM Win32_ComputerSystemProduct
Source: C:\Windows\SysWOW64\wbem\WMIC.exe WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT UUID FROM Win32_ComputerSystemProduct
Source: java.exe, 00000007.00000003.365423035.000000001566B000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: java.exe, 00000007.00000003.365423035.000000001566B000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: &com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: java.exe, 00000007.00000002.400088793.0000000003030000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: ,java/lang/VirtualMachineError
Source: java.exe, 00000007.00000002.400088793.0000000003030000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: |[Ljava/lang/VirtualMachineError;
Source: java.exe, 00000007.00000003.365423035.000000001566B000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: org/omg/CORBA/OMGVMCID.classPK
Source: java.exe, 00000007.00000003.365423035.000000001566B000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: java/lang/VirtualMachineError.classPK
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Memory protected: page read and write | page guard Jump to behavior
Creates a process in suspended mode (likely to inject code)
Source: C:\Windows\System32\cmd.exe Process created: C:\Windows\System32\7za.exe 7za.exe x -y -oC:\jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" Jump to behavior
Source: C:\Windows\System32\cmd.exe Process created: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe java.exe -jar "C:\Users\user\Desktop\CMTNGTFESJRKMAMSPWITGCAGOVGAFQODETEHLFVAACNQUJQP.jar" i Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic CPU get ProcessorId Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic bios get serialnumber Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get name Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\wbem\WMIC.exe wmic csproduct get UUID Jump to behavior
Source: C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_885250\java.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /c ver Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 679298 Sample: CMTNGTFESJRKMAMSPWITGCAGOVG... Startdate: 05/08/2022 Architecture: WINDOWS Score: 56 39 Multi AV Scanner detection for submitted file 2->39 41 Exploit detected, runtime environment starts unknown processes 2->41 8 cmd.exe 2 2->8         started        10 cmd.exe 1 2->10         started        process3 process4 12 java.exe 5 8->12         started        14 conhost.exe 8->14         started        16 7za.exe 16 10->16         started        process5 18 WMIC.exe 1 12->18         started        21 WMIC.exe 1 12->21         started        23 WMIC.exe 1 12->23         started        25 3 other processes 12->25 signatures6 43 Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines) 18->43 27 conhost.exe 18->27         started        29 conhost.exe 21->29         started        31 conhost.exe 23->31         started        33 conhost.exe 25->33         started        35 conhost.exe 25->35         started        37 conhost.exe 25->37         started        process7
⊘No contacted IP infos