Analysis Report dependency-track-apiserver.war

Overview

General Information

Sample Name: dependency-track-apiserver.war (renamed file extension from war to jar)
Analysis ID: 362011
MD5: a52c23fbc9d3cd61165517dd66426eaa
SHA1: ed951e6a1db32b5541b646f7595cce28345c816d
SHA256: e459525d279abef75f0d6cef756636503b1040939778df14decaaca65d284db1
Infos:

Most interesting Screenshot:

Detection

Score: 2
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Abnormal high CPU Usage
Creates a process in suspended mode (likely to inject code)
Sample execution stops while process was sleeping (likely an evasion)
Uses cacls to modify the permissions of files
Uses code obfuscation techniques (call, push, ret)

Classification

Compliance:

barindex
Uses new MSVCR Dlls
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\jetty-0_0_0_0-8080-dependency-track-apiserver_jar-_-any-2292054893940585100\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\jetty-0_0_0_0-8080-dependency-track-apiserver_jar-_-any-2292054893940585100\webapp\ Jump to behavior
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/allow-java-encodings
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/allow-java-encodings9
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/continue-after-fatal-error
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-decl
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/generate-synthetic-annotations
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/generate-synthetic-annotations9
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/honour-all-schemaLocations
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/internal/parser-settings
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/internal/tolerate-duplicates
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/namespace-growth
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtd
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refs
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refs6
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refs
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refs3
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformant
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformantME2
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validate-annotations
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-trees
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-treesti1
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/dynamic
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/dynamictil;
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking=
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/augment-psvi
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-default
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-defaultA
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/normalized-value
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/normalized-valueB
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema1
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-duplicate-attdef
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-duplicate-attdefD
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-undeclared-elemdef
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydef
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-base-uris
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-language
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-language;
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude7
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/D
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/input-buffer-size
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory:
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scanner
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scanner7
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-processor
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scanner
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scanner8
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager8
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-resolver
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-resolver7
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-handler
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporter
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporter:
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/grammar-pool
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/grammar-pool6
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-binder
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-context
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-context:
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/stax-entity-resolver
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/stax-entity-resolverL_=
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-table
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-tableQ
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation-manager
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation-managerF
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation/schema/dv-factory
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation/schema/dv-factory7
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd:
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/schema
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/xinclude-handler
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/locale
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation(
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-schemaLocation
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/security-manager
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/properties/security-managerD
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://apache.org/xml/xmlschema/1.0/anonymousTypes
Source: java.exe, 00000002.00000002.593445120.000000000A1C5000.00000004.00000001.sdmp String found in binary or memory: http://bugreport.sun.com/bugreport/
Source: java.exe, 00000002.00000002.593464286.000000000A1D5000.00000004.00000001.sdmp String found in binary or memory: http://java.oracle.com/
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/dom/properties/
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaLanguage
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaLanguage4
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaSource
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/j2ee/j2ee_1_4.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/j2ee/jsp_2_0.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsdU
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/javaee_5.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/javaee_6.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/javaee_web_services_client_1_3.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/ns/javaee/javaee_web_services_client_1_3.xsdapacN&
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/jsp_2_1.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/jsp_2_2.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/ns/javaee/jsp_2_2.xsdz
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-common_3_0.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-common_3_0.xsdK
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-fragment_3_0.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/ns/javaee/web-fragment_3_0.xsdke
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/schema/features/report-ignored-element-content-whitespace
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/ignore-external-dtd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/ignore-external-dtd-FW
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/reader-in-defined-state
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://java.sun.com/xml/stream/properties/report-cdata-event
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/feature/secure-processing
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/feature/secure-processing&
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/3
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalDTD
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalDTD;
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://javax.xml.XMLConstants/property/accessExternalSchema
Source: java.exe, 00000002.00000002.585781591.0000000000DFD000.00000004.00000001.sdmp String found in binary or memory: http://license.coscl.org.cn/MulanPSL2
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#appender_order
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#block
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#blockL
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#earlier_fa_collision
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#fwrp_parentFileName_not_set
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#fwrp_parentFileName_not_setring
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#ifJanino
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#ifJanino6
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#layoutInsteadOfEncoder
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#missingRightParenthesis
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#missingRightParenthesis-
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#missingRightParenthesisventPla
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#null_CS
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#renamingError
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#renamingErrorlekF
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#rfa_collision
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#rfa_file_after
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#rfa_no_rp
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#rfa_no_tp
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#rfa_no_tpon
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#sat_missing_integer_token
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#sbtp_size_format
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#sbtp_size_formatx
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#tbr_fnp_not_set
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#tbr_fnp_not_set/4
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupported
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/codes.html#tbr_fnp_prudent_unsupportedva/
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.593918233.000000000A37A000.00000004.00000001.sdmp String found in binary or memory: http://logback.qos.ch/manual/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: about.html.2.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: about.html.2.dr String found in binary or memory: http://www.eclipse.org
Source: about.html.2.dr String found in binary or memory: http://www.eclipse.org/legal/epl-v10.html
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://www.ibm.com/webservices/xsd/j2ee_web_services_client_1_1.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://www.ibm.com/webservices/xsd/j2ee_web_services_client_1_1.xsdundNo
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://www.ibm.com/webservices/xsd/javaee_web_services_client_1_2.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://www.ibm.com/webservices/xsd/javaee_web_services_client_1_2.xsdanT
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/feature/use-service-mechanism
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/-
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/elementAttributeLimit
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityReplacementLimit
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/entityReplacementLimit9
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/getEntityCountInfo
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxElementDepth
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxGeneralEntitySizeLimit
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxGeneralEntitySizeLimit7
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxOccurLimit
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxOccurLimitE
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxParameterEntitySizeLimit
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxParameterEntitySizeLimit9
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/maxXMLNameLimit
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/totalEntitySizeLimit
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/xmlSecurityPropertyManager
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://www.oracle.com/xml/jaxp/properties/xmlSecurityPropertyManagerl
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#StaticLoggerBinder
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#loggerNameMismatch
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#multiple_bindings
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.594151558.000000000A425000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#no_static_mdc_binder
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#no_static_mdc_binderio/O
Source: java.exe, 00000002.00000002.593656041.000000000A2B1000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#null_LF
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp, java.exe, 00000002.00000002.594151558.000000000A425000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#null_MDCA
Source: java.exe, 00000002.00000003.360912678.00000000159C9000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#null_MDCAEPA
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#replay
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#replay/
Source: java.exe, 00000002.00000002.593656041.000000000A2B1000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#substituteLogger
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#substituteLoggerdIdx
Source: java.exe, 00000002.00000002.593656041.000000000A2B1000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInit
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInitc%
Source: java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch;:
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/9
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTD
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/external-general-entities
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/external-parameter-entities
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/namespace-prefixes
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/namespaces
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/string-interning
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/features/validation
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/1
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/declaration-handler
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/declaration-handler&
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/dom-node
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/dom-node-
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/lexical-handler
Source: java.exe, 00000002.00000002.593846917.000000000A354000.00000004.00000001.sdmp, java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598319681.0000000015848000.00000004.00000001.sdmp String found in binary or memory: http://xml.org/sax/properties/xml-string
Source: webdefault.xml.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/javaee_7.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/javaee_web_services_client_1_4.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/jsp_2_3.xsd
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp, webdefault.xml.2.dr, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd6
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-common_3_1.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-common_3_1.xsde
Source: java.exe, 00000002.00000002.596548858.00000000151DE000.00000004.00000001.sdmp, java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp, WebDescriptor$1.class.2.dr String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-fragment_3_1.xsd
Source: java.exe, 00000002.00000002.599863876.00000000160B3000.00000004.00000001.sdmp String found in binary or memory: http://xmlns.jcp.org/xml/ns/javaee/web-fragment_3_1.xsdh
Source: index.html.2.dr String found in binary or memory: https://docs.dependencytrack.org/
Source: java.exe, 00000002.00000002.598233160.0000000015790000.00000004.00000001.sdmp, Server.class.2.dr String found in binary or memory: https://download.eclipse.org/jetty/
Source: FileResource.class.2.dr String found in binary or memory: https://eclipse.org/bad/canonical/alias
Source: DefaultHandler.class.2.dr, Jetty.class.2.dr String found in binary or memory: https://eclipse.org/jetty
Source: java.exe, 00000002.00000002.600083768.0000000016217000.00000004.00000001.sdmp String found in binary or memory: https://github.F
Source: java.exe, 00000002.00000002.594261236.000000000A46E000.00000004.00000001.sdmp String found in binary or memory: https://github.com/eclipse/jetty.project.git/jetty-util
Source: java.exe, 00000002.00000002.585781591.0000000000DFD000.00000004.00000001.sdmp String found in binary or memory: https://license.coscl.org.cn/MulanPSL2/
Source: java.exe, 00000002.00000002.600083768.0000000016217000.00000004.00000001.sdmp String found in binary or memory: https://oss.sonatype
Source: MultiPartInputStreamParser$NonCompliance.class.2.dr String found in binary or memory: https://tools.ietf.org/html/rfc2046#section-4.1.1
Source: MultiPartInputStreamParser$NonCompliance.class.2.dr String found in binary or memory: https://tools.ietf.org/html/rfc2046#section-5.1.1
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#appendix-A.2
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.1.1
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.1.18
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.4
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.3.1
Source: java.exe, 00000002.00000002.599507931.0000000015F10000.00000004.00000001.sdmp String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.3.1$
Source: MultiPartInputStreamParser$NonCompliance.class.2.dr String found in binary or memory: https://tools.ietf.org/html/rfc7578#section-4.7
Source: HomeBaseWarning.class.2.dr String found in binary or memory: https://www.eclipse.org/jetty/documentation/current/startup.html

System Summary:

barindex
Abnormal high CPU Usage
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Process Stats: CPU usage > 98%
Source: classification engine Classification label: clean2.winJAR@7/1025@0/0
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File created: C:\Users\user\.dependency-track Jump to behavior
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7076:120:WilError_01
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6384:120:WilError_01
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File created: C:\Users\user\AppData\Local\Temp\hsperfdata_user Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Section loaded: C:\Program Files (x86)\Java\jre1.8.0_211\bin\client\jvm.dll Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: unknown Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ''C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar 'C:\Users\user\Desktop\dependency-track-apiserver.jar'' >> C:\cmdlinestart.log 2>&1
Source: unknown Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown Process created: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe 'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar 'C:\Users\user\Desktop\dependency-track-apiserver.jar'
Source: unknown Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M
Source: unknown Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe 'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar 'C:\Users\user\Desktop\dependency-track-apiserver.jar' Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M Jump to behavior
Source: dependency-track-apiserver.jar Static file information: File size 86704488 > 1048576
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior

Data Obfuscation:

barindex
Uses code obfuscation techniques (call, push, ret)
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Code function: 2_3_1599EE00 push eax; ret 2_3_1599EE21

Hooking and other Techniques for Hiding and Protection:

barindex
Uses cacls to modify the permissions of files
Source: unknown Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M

Malware Analysis System Evasion:

barindex
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\jetty-0_0_0_0-8080-dependency-track-apiserver_jar-_-any-2292054893940585100\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\ Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe File opened: C:\Users\user\AppData\Local\Temp\jetty-0_0_0_0-8080-dependency-track-apiserver_jar-_-any-2292054893940585100\webapp\ Jump to behavior
Source: java.exe, 00000002.00000002.597567437.0000000015460000.00000002.00000001.sdmp Binary or memory string: A Virtual Machine could not be started because Hyper-V is not installed.
Source: java.exe, 00000002.00000002.586284401.0000000002AD0000.00000004.00000001.sdmp Binary or memory string: ,java/lang/VirtualMachineError
Source: java.exe, 00000002.00000002.586284401.0000000002AD0000.00000004.00000001.sdmp Binary or memory string: |[Ljava/lang/VirtualMachineError;
Source: java.exe, 00000002.00000002.597567437.0000000015460000.00000002.00000001.sdmp Binary or memory string: A communication protocol error has occurred between the Hyper-V Host and Guest Compute Service.
Source: java.exe, 00000002.00000002.597567437.0000000015460000.00000002.00000001.sdmp Binary or memory string: The communication protocol version between the Hyper-V Host and Guest Compute Services is not supported.
Source: java.exe, 00000002.00000002.585871367.0000000000FFB000.00000004.00000020.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: java.exe, 00000002.00000002.597567437.0000000015460000.00000002.00000001.sdmp Binary or memory string: An unknown internal message was received by the Hyper-V Compute Service.
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Memory protected: page read and write | page guard Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

barindex
Creates a process in suspended mode (likely to inject code)
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe 'C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe' -javaagent:'C:\Users\user\AppData\Local\Temp\jartracer.jar' -jar 'C:\Users\user\Desktop\dependency-track-apiserver.jar' Jump to behavior
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Process created: C:\Windows\SysWOW64\icacls.exe C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant 'everyone':(OI)(CI)M Jump to behavior
Source: java.exe, 00000002.00000002.586074063.00000000014F0000.00000002.00000001.sdmp Binary or memory string: Shell_TrayWnd
Source: java.exe, 00000002.00000002.586074063.00000000014F0000.00000002.00000001.sdmp Binary or memory string: Progman
Source: java.exe, 00000002.00000002.586074063.00000000014F0000.00000002.00000001.sdmp Binary or memory string: &Program Manager
Source: java.exe, 00000002.00000002.586074063.00000000014F0000.00000002.00000001.sdmp Binary or memory string: Progmanlock
Source: C:\Program Files (x86)\Java\jre1.8.0_211\bin\java.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 362011 Sample: dependency-track-apiserver.war Startdate: 03/03/2021 Architecture: WINDOWS Score: 2 7 cmd.exe 2 2->7         started        process3 9 java.exe 503 7->9         started        11 conhost.exe 7->11         started        process4 13 icacls.exe 1 9->13         started        process5 15 conhost.exe 13->15         started       
No contacted IP infos