Windows Analysis Report
iDentalSoftBridgeSetup_12.2.0_x86 (1).exe

Overview

General Information

Sample name: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe
Analysis ID: 1525215
MD5: 4eb785583966bc768c79a867a68a73ec
SHA1: 6cbcb89f3a3b44861007c31d90731d76e357cdc3
SHA256: 6c9e522203f8b8f4a020c991c2703e1787a49ca281bf56d0bfcf09ca98b6811b
Infos:

Detection

Score: 32
Range: 0 - 100
Whitelisted: false
Confidence: 20%

Compliance

Score: 47
Range: 0 - 100

Signatures

Detected unpacking (changes PE section rights)
Contains functionality to prevent local Windows debugging
Installs new ROOT certificates
Registers a new ROOT certificate
Sigma detected: System File Execution Location Anomaly
Contains functionality to call native functions
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to detect virtual machines (SLDT)
Contains functionality to dynamically determine API calls
Contains functionality to launch a program with higher privileges
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query locales information (e.g. system language)
Contains functionality to shutdown / reboot the system
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Detected potential crypto function
Drops PE files
Drops certificate files (DER)
Enables debug privileges
Entry point lies outside standard sections
Extensive use of GetProcAddress (often used to hide API calls)
Found dropped PE file which has not been started or loaded
Found evasive API chain (date check)
Found inlined nop instructions (likely shell or obfuscated code)
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
PE file contains executable resources (Code or Archives)
PE file contains sections with non-standard names
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification
Stores files to the Windows start menu directory
Uses 32bit PE files
Uses Microsoft's Enhanced Cryptographic Provider
Uses cacls to modify the permissions of files
Uses code obfuscation techniques (call, push, ret)
Uses taskkill to terminate processes
Uses the system / local time for branch decision (may execute only at specific dates)

Classification

Uses Microsoft's Enhanced Cryptographic Provider
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0106765A CryptDecodeObjectEx,SetLastError, 10_2_0106765A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104C916 CertGetPublicKeyLength,SetCursor,SetCursor,#225,wcslen,#223,#223,DialogBoxParamW,SysStringByteLen,CryptReleaseContext,LocalFree,LocalFree,LocalFree,LocalFree,CertFreeCTLContext,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,SysFreeString, 10_2_0104C916
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01028914 LocalFree,CryptMsgGetAndVerifySigner,CryptMsgGetAndVerifySigner,CertFreeCTLContext,CryptMsgControl,CryptMsgGetParam,LocalFree,LocalFree,CertFreeCTLContext, 10_2_01028914
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102B91E CryptVerifyCertificateSignature,LocalFree,LocalFree, 10_2_0102B91E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01020139 CertFindExtension,CryptDecodeObject, 10_2_01020139
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102713D LocalFree,CryptDecodeObject,LocalFree,LocalFree,CryptDecodeObject,IsThreadDesktopComposited,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0102713D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01035151 CryptGetProvParam,CryptGetProvParam,LocalAlloc,CryptGetProvParam,LocalFree, 10_2_01035151
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103A15E lstrcmpW,LocalFree,LocalFree,CryptReleaseContext,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0103A15E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104C167 CryptExportPublicKeyInfo,CryptExportPublicKeyInfo,LocalAlloc,CryptExportPublicKeyInfo,CertFindExtension,LocalAlloc,CAFindCertTypeByName,CAGetCertTypeExtensions,LocalAlloc,CertFindExtension,CertFindExtension,CryptSignAndEncodeCertificate,CryptSignAndEncodeCertificate,LocalAlloc,IsThreadDesktopComposited,CryptSignAndEncodeCertificate,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CAFreeCertTypeExtensions,CACloseCertType, 10_2_0104C167
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101696D CryptMsgClose,CertCloseStore,LocalFree, 10_2_0101696D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01052171 CryptFindOIDInfo,CryptEncryptMessage,LocalAlloc,CryptEncryptMessage,LocalFree, 10_2_01052171
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010399A3 CryptAcquireContextW,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptImportKey,CertFreeCTLContext,CryptReleaseContext,LocalFree,LocalFree,LocalFree,CryptDestroyKey, 10_2_010399A3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010671B5 CryptSignCertificate,SetLastError, 10_2_010671B5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010679CA CryptDecodeObject,wcslen,wcslen,wcslen,LocalAlloc,wcscpy,wcslen,wcscpy,wcslen,wcscpy,wcslen,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_010679CA
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010411EF LocalFree,LocalFree,LocalFree,CryptReleaseContext, 10_2_010411EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103E9EF CryptVerifyCertificateSignature,CertVerifyTimeValidity,CertOpenStore,CertVerifyRevocation,CertCloseStore, 10_2_0103E9EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01067001 CryptExportPublicKeyInfo,SetLastError, 10_2_01067001
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103A01F CryptGetUserKey,LocalFree,CryptDestroyKey, 10_2_0103A01F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104F824 CryptAcquireContextW,CryptCreateHash,CryptHashData,CryptGetHashParam,LocalAlloc,wcscpy,CryptDestroyHash,CryptReleaseContext, 10_2_0104F824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01038030 CryptDecodeObject,LocalAlloc,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_01038030
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102C055 _strnicmp,CryptDecodeObject,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0102C055
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01035872 SCardListCardsW,SCardGetCardTypeProviderNameW,swprintf,CryptAcquireContextW,SCardFreeMemory,SCardFreeMemory,CryptReleaseContext, 10_2_01035872
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01036081 CryptAcquireCertificatePrivateKey,LocalFree,LocalFree,CryptFindCertificateKeyProvInfo,LocalFree,LocalFree,CryptReleaseContext, 10_2_01036081
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101A887 CryptRetrieveObjectByUrlW,CertEnumCRLsInStore,CertFreeCTLContext,CertCloseStore, 10_2_0101A887
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105488D CryptImportPublicKeyInfo,CryptGenKey,CryptGenRandom,CryptDestroyKey,CryptGetUserKey,CryptImportKey,CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0105488D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102F09D fprintf,lstrcmpW,CryptMsgControl,CertFreeCTLContext,CertFreeCTLContext,LocalFree,LocalFree,SysFreeString,LocalFree, 10_2_0102F09D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010678B6 CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,LocalFree, 10_2_010678B6
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010280CA LocalFree,LocalFree,LocalFree,CryptDecodeObject,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_010280CA
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010430CD #223,CryptVerifyCertificateSignature,LocalFree,LocalFree,LocalFree, 10_2_010430CD
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010180D0 #223,CertFindCertificateInStore,LocalFree,CryptMsgClose,CertFreeCTLContext,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CertCloseStore,CryptMsgClose, 10_2_010180D0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010390D0 LocalAlloc,CryptSetKeyParam,GetLastError,LocalAlloc,CryptDecrypt,GetLastError,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_010390D0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010520D1 LocalAlloc,IsThreadDesktopComposited,CryptDecrypt,LocalFree, 10_2_010520D1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010530DF CertFindExtension,CryptDecodeObject, 10_2_010530DF
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010428F8 CertCompareCertificateName,CertCompareCertificateName,GetSystemTime,SystemTimeToFileTime,CompareFileTime,CompareFileTime,CompareFileTime,CompareFileTime,CompareFileTime,CryptVerifyCertificateSignature,CertCompareCertificateName,CertCompareCertificateName, 10_2_010428F8
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103E30E CryptUIDlgViewCertificateW, 10_2_0103E30E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102CB10 CryptAcquireCertificatePrivateKey,CryptGetUserKey,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext, 10_2_0102CB10
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104D316 CryptGetProvParam,CryptGetProvParam,LocalAlloc,CryptGetProvParam,LocalFree,CryptReleaseContext,LocalAlloc,CryptGetProvParam,wcscmp,CryptReleaseContext,LocalFree, 10_2_0104D316
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103E345 CryptUIDlgViewCRLW, 10_2_0103E345
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102F358 LocalFree,LocalFree,lstrcmpW,CryptAcquireContextW,#256,CryptGenRandom,fopen,fopen,fopen,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,fprintf,LocalAlloc,fprintf,fprintf,wsprintfW,fprintf,fprintf,wsprintfW,fprintf,wsprintfW,wsprintfW,fprintf,fprintf,fprintf,fprintf,fprintf,CertOpenStore,CertSaveStore,LocalAlloc,CertSaveStore,fprintf,wsprintfW,fprintf,fflush,CertCloseStore,CertFreeCTLContext,CertFreeCTLContext,CertFreeCTLContext,fclose,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,CryptReleaseContext,CryptReleaseContext, 10_2_0102F358
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103EB58 CertFindExtension,CryptDecodeObject, 10_2_0103EB58
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01052B5B CryptHashData, 10_2_01052B5B
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01015360 #246,CertFindExtension,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptReleaseContext,CryptAcquireContextW,LocalFree, 10_2_01015360
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01052B93 CryptDuplicateHash,CryptGetHashParam,#203,CryptDestroyHash, 10_2_01052B93
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102339D CryptDecodeObject,SysFreeString, 10_2_0102339D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103EBBD CryptGetObjectUrl,CryptGetObjectUrl,LocalAlloc,CryptGetObjectUrl,LocalFree, 10_2_0103EBBD
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01029BCD CryptDuplicateKey,CryptEncrypt,CryptEncrypt,CryptEncrypt,CryptDestroyKey, 10_2_01029BCD
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01039BF3 CryptAcquireContextW,CryptGetUserKey,LocalFree,LocalFree,CryptReleaseContext,LocalFree, 10_2_01039BF3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01052A06 CryptAcquireContextW,CryptCreateHash,CryptReleaseContext, 10_2_01052A06
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01035206 CryptGetKeyParam,CryptGetKeyParam,LocalAlloc,CryptGetKeyParam,CertCreateCertificateContext,CryptExportPublicKeyInfo,CryptExportPublicKeyInfo,LocalAlloc,CryptExportPublicKeyInfo,CertComparePublicKeyInfo,CertSetCertificateContextProperty,LocalFree,LocalFree,LocalFree,LocalFree,CertFreeCTLContext, 10_2_01035206
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01053A08 GetEnvironmentVariableW,_wtoi,#203,CryptDestroyHash,CryptReleaseContext,#203,#203,#207,#203,#203,LocalFree,#203,CryptDestroyHash,CryptReleaseContext, 10_2_01053A08
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104DA10 LoadCursorW,LoadCursorW,SetCursor,SetCursor,#210,LoadCursorW,SetCursor,EnableWindow,SetWindowLongW,SetWindowLongW,SetWindowLongW,SetWindowLongW,GetDlgItem,GetDlgItem,SetWindowTextW,GetDlgItem,ShowWindow,CryptUIDlgFreeCAContext, 10_2_0104DA10
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102DA27 CryptAcquireContextW,wsprintfW,LocalFree,LocalFree,wsprintfW,wsprintfW,wsprintfW,wsprintfW,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,DeleteFileW,LocalFree, 10_2_0102DA27
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105422D CryptAcquireContextW,SetLastError, 10_2_0105422D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102BA31 CryptGenRandom, 10_2_0102BA31
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01052246 CryptDecryptMessage,CryptDecryptMessage, 10_2_01052246
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01029A45 LocalAlloc,CryptHashData,CryptCreateHash,CryptHashData,CryptHashData,CryptGetHashParam,CryptDestroyHash,LocalFree,CryptDestroyHash, 10_2_01029A45
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104D266 CryptGetProvParam,LocalAlloc,LocalFree,SetLastError, 10_2_0104D266
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054A82 CryptReleaseContext, 10_2_01054A82
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01038A97 CryptAcquireContextW,CryptCreateHash,CryptHashData,CryptHashData,CryptHashData,CryptImportPublicKeyInfo,CryptVerifySignatureW,CertCreateCertificateContext,LocalFree,LocalFree,LocalFree,CryptDestroyKey,CryptDestroyHash,CryptReleaseContext, 10_2_01038A97
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01022AF3 CryptFormatObject,wcscspn, 10_2_01022AF3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102BAF4 GetSystemTime,SystemTimeToFileTime,CertCreateCertificateContext,CryptReleaseContext,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0102BAF4
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01053512 CryptSetProvParam, 10_2_01053512
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01024D4E CryptHashPublicKeyInfo,LocalFree, 10_2_01024D4E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01053555 CryptGetProvParam,CryptGetUserKey,CryptGetKeyParam,CryptDestroyKey, 10_2_01053555
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102D55A LocalAlloc,CryptCreateHash,CryptHashData,CryptGetHashParam,CryptImportKey,CryptSetKeyParam,CryptSetKeyParam,CryptSetKeyParam,CryptCreateHash,CryptHashData,CryptHashData,CryptHashData,CryptGetHashParam,CryptSetKeyParam,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyHash,CryptDestroyHash,CryptDestroyHash, 10_2_0102D55A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102BD68 fprintf,CryptReleaseContext,CryptReleaseContext,CryptReleaseContext,CertFreeCTLContext,CertFreeCTLContext,CertFreeCTLContext, 10_2_0102BD68
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01037D91 CryptGetDefaultProviderW,LocalAlloc,CryptGetDefaultProviderW, 10_2_01037D91
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01022598 CertFindExtension,CryptFormatObject,CryptFormatObject,LocalAlloc,CryptFormatObject,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_01022598
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105159E CryptAcquireContextW,CryptAcquireContextW,CryptReleaseContext,CryptAcquireContextW,CryptAcquireContextW,CryptGenKey,CryptDestroyKey, 10_2_0105159E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01055DA6 SetCursor,LocalAlloc,CertOpenStore,#246,CryptUIDlgSelectCertificateW,CertCloseStore,SysFreeString,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_01055DA6
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010545CE CryptGetProvParam,CryptGetProvParam,CryptFindOIDInfo,CryptReleaseContext, 10_2_010545CE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01037DFF CertFindExtension,CryptDecodeObject, 10_2_01037DFF
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010675F8 CryptEncodeObjectEx,SetLastError, 10_2_010675F8
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102D40A CertOpenStore,CertFindCertificateInStore,CertFindCertificateInStore,CryptVerifyCertificateSignature,LocalFree,CertFreeCTLContext,CertCloseStore, 10_2_0102D40A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103BC0A CryptAcquireContextW,CryptImportKey,CryptImportKey,CryptImportKey,CertSetCertificateContextProperty,CertAddCertificateContextToStore,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,LocalFree, 10_2_0103BC0A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104140A CryptReleaseContext,LocalFree, 10_2_0104140A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01051C24 CryptDecodeObject,wcslen,wcslen,LocalAlloc,wcscpy,wcslen,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_01051C24
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01066C35 CertOpenStore,CryptMsgOpenToDecode,CryptMsgUpdate,CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,CryptMsgClose,CertCloseStore,LocalFree,LocalFree,LocalFree, 10_2_01066C35
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01024447 CryptMsgGetAndVerifySigner,CertEnumCertificatesInStore,CertFreeCTLContext, 10_2_01024447
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01023C4C CertEnumCertificatesInStore,CryptAcquireCertificatePrivateKey,CryptGetUserKey,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext, 10_2_01023C4C
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102644C CryptFormatObject,CryptFormatObject,LocalAlloc,CryptFormatObject,LocalFree,LocalFree,LocalFree, 10_2_0102644C
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054C5F CryptAcquireContextW, 10_2_01054C5F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101945E CryptAcquireContextW,CryptGenRandom,CryptGenRandom,CryptGenRandom,CryptReleaseContext, 10_2_0101945E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101A465 CryptRetrieveObjectByUrlW,InternetQueryDataAvailable,InternetReadFile,InternetReadFile,LocalAlloc,CertCloseStore,LocalFree,LocalFree,LocalFree, 10_2_0101A465
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01028C6A CryptMsgGetParam,CryptMsgGetParam,CertEnumCertificatesInStore,CertEnumCertificatesInStore,CertEnumCRLsInStore,CertEnumCRLsInStore,CertEnumCRLsInStore,LocalFree,LocalFree,CryptMsgClose,CertFreeCTLContext,CertFreeCTLContext,CertCloseStore,LocalFree, 10_2_01028C6A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101D470 #140,iswdigit,wcslen,CryptDecodeObject,wcslen,#224, 10_2_0101D470
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104B473 CryptReleaseContext,CertComparePublicKeyInfo,LocalFree,LocalFree,CryptReleaseContext,LocalFree,CertFreeCTLContext,LocalFree,LocalFree,CryptReleaseContext,LocalFree,CertFreeCTLContext, 10_2_0104B473
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054C84 CryptAcquireContextW,CryptImportKey,CryptDestroyKey,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptDestroyKey,CryptReleaseContext,CryptAcquireContextW,CryptDestroyKey,CryptReleaseContext,LocalFree, 10_2_01054C84
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01024C8B CertFindExtension,CryptDecodeObject, 10_2_01024C8B
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103EF13 CryptVerifyCertificateSignature,CertVerifyCRLTimeValidity,CertCompareCertificateName,CertCompareCertificateName,CertCompareCertificateName, 10_2_0103EF13
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01050F13 GetSystemInfo,CreateFileW,GetFileSize,CreateFileMappingW,CryptAcquireContextW,CryptCreateHash,MapViewOfFile,CryptHashData,UnmapViewOfFile,CryptGetHashParam,UnmapViewOfFile,CloseHandle,CloseHandle,CryptDestroyHash,CryptReleaseContext, 10_2_01050F13
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01067742 CryptHashPublicKeyInfo,LocalAlloc,LocalFree, 10_2_01067742
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01051F4C CryptExportKey,CryptExportKey,LocalAlloc,CryptExportKey,LocalFree, 10_2_01051F4C
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01043756 CryptVerifyCertificateSignature,CryptVerifyCertificateSignatureEx, 10_2_01043756
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104DF68 #210,SetWindowTextW,SetFocus,SendMessageW,LocalFree,LocalFree,LocalFree,CryptUIDlgFreeCAContext,CoUninitialize,SendMessageW,wcslen,LocalAlloc,wcscpy,LocalFree,UpdateWindow,CoInitialize,LoadCursorW,LoadCursorW,SetCursor,LoadCursorW,SetCursor,SetFocus,wcslen,SetWindowTextW, 10_2_0104DF68
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01053770 CryptAcquireCertificatePrivateKey,CryptReleaseContext, 10_2_01053770
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01041F71 CertFindExtension,CryptDecodeObject, 10_2_01041F71
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01037F94 CryptDecodeObject, 10_2_01037F94
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01029F9E CryptDuplicateKey,CryptEncrypt,LocalAlloc,CryptEncrypt,LocalAlloc,CryptDestroyKey,LocalFree, 10_2_01029F9E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102AFB5 CertAddEncodedCertificateToStore,StringFromCLSID,CryptAcquireContextW,CryptImportKey,CertSetCertificateContextProperty,CryptDestroyKey,CryptReleaseContext,CoTaskMemFree,CertFreeCTLContext, 10_2_0102AFB5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010527CE CertFindExtension,CryptDecodeObject, 10_2_010527CE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105A7CE CryptGetUserKey,CryptReleaseContext,CryptImportKey,LocalFree,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,CryptDestroyKey,CryptReleaseContext, 10_2_0105A7CE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01051FE4 LocalAlloc,CryptEncrypt,LocalFree,LocalAlloc,LocalFree, 10_2_01051FE4
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01049FE3 CryptReleaseContext, 10_2_01049FE3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054FED CertFindCertificateInStore,CryptAcquireCertificatePrivateKey,CertFindCertificateInStore,CertFreeCTLContext, 10_2_01054FED
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102BFF5 CryptDecodeObject, 10_2_0102BFF5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105261D CryptFindOIDInfo,CryptFindOIDInfo,CryptFindOIDInfo, 10_2_0105261D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01029E1E LocalAlloc,CryptDuplicateKey,CryptDecrypt,CryptDestroyKey,LocalFree, 10_2_01029E1E
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102B61D CryptAcquireContextW,CryptGenKey,CryptDestroyKey, 10_2_0102B61D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01065E25 CryptSetProvParam,LocalFree, 10_2_01065E25
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01049E2D CryptAcquireContextW,CryptAcquireContextW,CryptReleaseContext,CryptAcquireContextW,CryptAcquireContextW,CryptGenKey,CryptGenKey,CryptGenKey,CryptDestroyKey, 10_2_01049E2D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01024E29 CryptHashPublicKeyInfo, 10_2_01024E29
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01031633 CryptReleaseContext, 10_2_01031633
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01024653 GetTickCount,CertOpenStore,CertAddEncodedCertificateToStore,CryptAcquireCertificatePrivateKey,CryptFindCertificateKeyProvInfo,LocalFree,CryptAcquireContextW,CertSetCertificateContextProperty,LocalFree,CertFreeCTLContext,CertCloseStore,CryptReleaseContext, 10_2_01024653
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01048677 CertFindExtension,CryptDecodeObject, 10_2_01048677
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01015675 LocalFree,LocalFree,LocalFree,SysFreeString,CertFreeCTLContext,CryptReleaseContext, 10_2_01015675
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01051673 CryptExportKey,CryptExportKey,LocalAlloc,CryptExportKey,LocalFree, 10_2_01051673
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01039E79 CreateFileW,GetFileSize,SetFilePointer,CertFreeCTLContext,CertFreeCTLContext,CertFreeCTLContext,CryptDestroyKey,CryptReleaseContext,CloseHandle, 10_2_01039E79
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01023688 CryptDecodeObject,LocalFree, 10_2_01023688
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102B693 CryptCreateHash,CryptHashData,CryptGetHashParam,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptImportKey,CryptDecrypt,CryptDestroyKey,CryptDestroyKey,CryptDestroyHash,LocalFree,CryptDestroyKey, 10_2_0102B693
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103569F CryptGetUserKey,wcslen,wcslen,wcslen,LocalAlloc,swprintf,CryptUIDlgViewCertificateW,CertFreeCTLContext,LocalFree,CryptDestroyKey, 10_2_0103569F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010386A0 CertCreateCertificateContext,CryptAcquireContextW,CryptImportKey,CertFreeCTLContext,LocalFree,CryptDestroyKey,CryptReleaseContext, 10_2_010386A0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01050EB8 CryptGetProvParam,LocalAlloc, 10_2_01050EB8
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010266C3 CryptDecodeObject,LocalFree,CryptDecodeObject,CryptDecodeObject,CryptDecodeObject,CryptDecodeObject,CryptDecodeObject,CryptDecodeObject,LocalFree,CryptDecodeObject, 10_2_010266C3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054EC8 CryptEnumProvidersA,LocalAlloc,CryptEnumProvidersA,LocalFree, 10_2_01054EC8
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010206D7 CertFindExtension,CryptDecodeObject,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_010206D7
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01017EDB CryptAcquireContextW, 10_2_01017EDB
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010546E1 CryptCreateHash,CryptGenRandom,CryptHashData,CryptSignHashW,CryptSignHashW,LocalAlloc,CryptSignHashW,CryptImportPublicKeyInfo,CryptGetUserKey,CryptVerifySignatureW,CryptDestroyHash,CryptDestroyKey,LocalFree, 10_2_010546E1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010396EC CryptImportKey,CryptSetKeyParam,LocalFree,CertFreeCTLContext,CryptDestroyKey, 10_2_010396EC
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_6F33F9C6 CryptDecodeObjectEx,SetLastError, 10_2_6F33F9C6
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BB374D CertOpenStore,CryptMsgOpenToDecode,CryptMsgUpdate,CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,CryptMsgClose,CertCloseStore,LocalFree,LocalFree,LocalFree, 10_2_77BB374D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA2EB5 #258,wcslen,wcslen,IsThreadDesktopComposited,CryptHashCertificate,wcsrchr,wcslen,wcslen,wcslen,wcslen,LocalAlloc,wcsncpy,wcscat,wcscat,wcscat,LocalFree, 10_2_77BA2EB5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BB46A8 CryptMsgGetParam,CryptMsgGetParam,CryptMsgGetParam,LocalFree, 10_2_77BB46A8
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA6610 CryptEncodeObject,CryptEncodeObject,CryptEncodeObject, 10_2_77BA6610
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BAEE6B LocalAlloc,CryptSignMessage,SetLastError, 10_2_77BAEE6B
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9B641 SysFreeString,LoadLibraryW,GetDesktopWindow,wcslen,wcslen,wcslen,LocalAlloc,wcscpy,wcscat,wcscat,wcscat,lstrcmpiW,LocalFree,FreeLibrary,LocalFree,LocalFree,LocalFree,CryptUIDlgFreeCAContext, 10_2_77B9B641
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BB3D87 CryptEncodeObjectEx,SetLastError, 10_2_77BB3D87
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BB3DF0 CryptDecodeObjectEx,SetLastError, 10_2_77BB3DF0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BAF528 CertFindExtension,CryptDecodeObject, 10_2_77BAF528
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA2522 LocalFree,CryptAcquireContextA,CryptGenRandom,CryptGenRandom,CryptGenRandom,wsprintfW,wsprintfW,wsprintfW,wcslen,wcslen,wcslen,wcslen,LocalAlloc,wcscpy,wcscat,wcscat,wcscat,CryptReleaseContext, 10_2_77BA2522
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA656F CryptEncodeObject,CryptEncodeObject,CryptEncodeObject, 10_2_77BA656F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA5489 wcslen,wcslen,wcslen,LocalAlloc,wcscat,wcscpy,wcscat,wcscat,GetSystemTimeAsFileTime,CryptMsgEncodeAndSignCTL,CryptMsgEncodeAndSignCTL,LocalAlloc,CryptMsgEncodeAndSignCTL,LocalFree,LocalFree,LocalFree, 10_2_77BA5489
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA83E2 LocalAlloc,LocalAlloc,LocalFree,LocalAlloc,LocalAlloc,LocalAlloc,wcschr,CryptEncodeObject,CryptEncodeObject,LocalAlloc,CryptEncodeObject,CAOIDFreeLdapURL,WideCharToMultiByte,LocalAlloc,WideCharToMultiByte,CryptEncodeObject,CryptEncodeObject,CryptEncodeObject,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,CAOIDFreeLdapURL, 10_2_77BA83E2
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9B2D1 LocalAlloc,LocalAlloc,LocalAlloc,LocalAlloc,LocalAlloc,wcsstr,wcslen,LocalAlloc,wcslen,LocalAlloc,wcscpy,wcscpy,SysFreeString,CryptUIDlgSelectCA,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,LocalFree,SysFreeString,SysFreeString, 10_2_77B9B2D1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA8237 wcslen,WideCharToMultiByte,LocalAlloc,wcslen,WideCharToMultiByte,CryptEncodeObject,CryptEncodeObject,CryptEncodeObject,LocalFree, 10_2_77BA8237
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BB420C wcslen,CryptDecodeObject,LocalFree, 10_2_77BB420C
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA7925 lstrcmpiW,lstrcmpiW,lstrcmpiW,wcslen,LocalAlloc,LocalFree,wcscpy,LocalFree,lstrcmpiW,lstrcmpiW,WideCharToMultiByte,WideCharToMultiByte,GetLastError,LocalAlloc,LocalAlloc,WideCharToMultiByte,GetLastError,LocalFree,CryptFindOIDInfo,LocalFree,wcslen,LocalAlloc,wcscpy,lstrcmpiW,lstrcmpiW, 10_2_77BA7925
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BAF09D CryptFindOIDInfo,CryptFindOIDInfo,CryptFindOIDInfo, 10_2_77BAF09D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA805A wcslen,wcslen,WideCharToMultiByte,WideCharToMultiByte,GetLastError,LocalAlloc,wcslen,WideCharToMultiByte,GetLastError,CryptEncodeObject,CryptEncodeObject,CryptEncodeObject,LocalFree, 10_2_77BA805A

Compliance
barindex
Uses 32bit PE files
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static PE information: certificate valid
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcr100.dll Jump to behavior
Source: Binary string: certadm.pdb source: certutil.exe, certutil.exe, 0000000A.00000002.2669008237.000000006F331000.00000020.00000001.01000000.0000000C.sdmp, certutil.exe, 0000000E.00000002.2673574475.000000006F331000.00000020.00000001.01000000.0000000C.sdmp
Source: Binary string: msvcp100.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386023496.000000006D3A1000.00000020.00000001.01000000.0000001C.sdmp
Source: Binary string: vcruntime140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386869503.000000006E941000.00000020.00000001.01000000.0000001A.sdmp
Source: Binary string: vcruntime140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3386869503.000000006E941000.00000020.00000001.01000000.0000001A.sdmp
Source: Binary string: msvcr100.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3385289449.000000006D2E1000.00000020.00000001.01000000.0000001D.sdmp
Source: Binary string: certcli.pdb source: certutil.exe, certutil.exe, 0000000A.00000002.2669135112.0000000077B91000.00000020.00000001.01000000.0000000D.sdmp, certutil.exe, 0000000E.00000002.2673731472.0000000077B91000.00000020.00000001.01000000.0000000D.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libnet\net.pdb source: iDSBridgeJ.exe, 0000001F.00000002.2795083135.000000006C46D000.00000002.00000001.01000000.00000013.sdmp
Source: Binary string: mfc140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3382093677.000000006C621000.00000020.00000001.01000000.0000001E.sdmp
Source: Binary string: mfc140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3382093677.000000006C621000.00000020.00000001.01000000.0000001E.sdmp
Source: Binary string: msvcp140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3386386581.000000006E831000.00000020.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\iDSBridgeNative.pdb source: iDSBridgeNative.exe, 0000001A.00000000.2714981155.0000000000A66000.00000002.00000001.01000000.00000017.sdmp, iDSBridgeNative.exe, 0000001A.00000002.3381003468.0000000000A66000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\BridgeNative.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3387598309.0000000073888000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: certutil.pdb source: certutil.exe, certutil.exe, 0000000A.00000000.2665836640.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000A.00000002.2668757884.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000002.2673288626.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000000.2669897300.0000000001001000.00000020.00000001.01000000.0000000A.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libnet\net.pdby source: iDSBridgeJ.exe, 0000001F.00000002.2795083135.000000006C46D000.00000002.00000001.01000000.00000013.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\iDSBridgeNative.pdb'' source: iDSBridgeNative.exe, 0000001A.00000000.2714981155.0000000000A66000.00000002.00000001.01000000.00000017.sdmp, iDSBridgeNative.exe, 0000001A.00000002.3381003468.0000000000A66000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: msvcp140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386386581.000000006E831000.00000020.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\BridgeNative.pdb-- source: iDSBridgeNative.exe, 0000001A.00000002.3387598309.0000000073888000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libzip\zip.pdb source: iDSBridgeJ.exe, 0000001F.00000002.2793202587.000000006BE9A000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\javaw_objs\javaw.pdb source: iDSBridgeJ.exe, 0000000D.00000000.2667545211.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3380614378.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000001F.00000000.2721460854.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2763260153.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00452A60 FindFirstFileA,GetLastError, 2_2_00452A60
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00474DFC FindFirstFileA,FindNextFileA,FindClose, 2_2_00474DFC
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004625C4 FindFirstFileA,FindNextFileA,FindClose, 2_2_004625C4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00463B50 SetErrorMode,FindFirstFileA,FindNextFileA,FindClose,SetErrorMode, 2_2_00463B50
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00497C14 FindFirstFileA,SetFileAttributesA,FindNextFileA,FindClose, 2_2_00497C14
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00463FCC SetErrorMode,FindFirstFileA,FindNextFileA,FindClose,SetErrorMode, 2_2_00463FCC
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105B191 FindFirstFileW,LocalFree,FindNextFileW,FindClose,LocalFree, 10_2_0105B191
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010501C5 wcslen,LocalAlloc,wcscpy,wcscpy,wcsrchr,FindFirstFileW,wcscpy,lstrcmpW,lstrcmpW,DeleteFileW,FindNextFileW,FindClose,LocalFree,LocalFree,LocalFree, 10_2_010501C5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105902A wcslen,wcscpy,wcscat,FindFirstFileW,FindNextFileW,FindClose, 10_2_0105902A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105A048 FindFirstFileW,FindNextFileW,FindClose,LocalFree, 10_2_0105A048
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010590DE wcslen,wcscpy,wcscpy,wcscat,FindFirstFileW,wcslen,wcscpy,DeleteFileW,FindNextFileW,FindClose, 10_2_010590DE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105AA90 wcslen,wcslen,wcscpy,wcscat,wcscat,wcscat,FindFirstFileW,FindNextFileW,wcslen,wcscpy,FindClose,wcslen,wcslen,LocalAlloc,wcscpy,wcscat,wcscat, 10_2_0105AA90
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105960F wcschr,wcslen,wcscpy,wcscat,FindFirstFileW,wcslen,wcscpy,wcsrchr,_wcsnicmp,iswxdigit,wcstoul,FindNextFileW,LocalFree,LocalFree,LocalFree,FindClose, 10_2_0105960F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_6F338862 WritePrivateProfileStringW,wcscpy,wsprintfW,wcscpy,wcschr,RegQueryValueExW,wcscpy,wcsrchr,FindFirstFileW,wcstoul,wcscpy,DeleteFileW,FindNextFileW,LocalFree,LocalFree,LocalFree,LocalFree,FindClose, 10_2_6F338862
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\x86\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\x86\swt-win32-4332.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\ Jump to behavior
Found inlined nop instructions (likely shell or obfuscated code)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then int ADh 10_2_77B98709
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then push eax 10_2_77BB3640
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then push eax 10_2_77BB35EA
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then push eax 10_2_77BB35E2
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then test esi, esi 10_2_77BAD49D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then mov edi, edi 10_2_77B9CA20
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 4x nop then mov edi, edi 10_2_77B9D278
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101A40C InternetReadFile,LocalAlloc, 10_2_0101A40C
Source: certutil.exe String found in binary or memory: http://%1/CertEnroll/%1_%3%4.crt
Source: certutil.exe, 0000000A.00000000.2665836640.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000A.00000002.2668757884.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000002.2673288626.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000000.2669897300.0000000001001000.00000020.00000001.01000000.0000000A.sdmp String found in binary or memory: http://%1/CertEnroll/%1_%3%4.crtfile://
Source: certutil.exe String found in binary or memory: http://%1/CertEnroll/%3%8%9.crl
Source: certutil.exe, 0000000A.00000000.2665836640.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000A.00000002.2668757884.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000002.2673288626.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000000.2669897300.0000000001001000.00000020.00000001.01000000.0000000A.sdmp String found in binary or memory: http://%1/CertEnroll/%3%8%9.crlfile://
Source: iDSBridgeJ.exe, 0000000D.00000003.2723257464.0000000026342000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2725196452.000000002639C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/featu
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005872000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/feature
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/allow-java-encodings
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/continue-after-fatal-error
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/create-cdata-nodes
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-decl
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/disallow-doctype-decl:
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/create-entity-ref-nodes
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/create-entity-ref-nodess
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/defer-node-expansion
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/dom/include-ignorable-whitespace
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/generate-synthetic-annotations
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/honour-all-schemaLocations
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/include-comments
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/parser-settings
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/parser-settings%
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtd
Source: iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtdEl
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/nonvalidating/load-external-dtdrcb
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refs
Source: iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refs(LjavaF
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-builtin-refsa/lang0
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/scanner/notify-char-refs
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/standard-uri-conformant
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validate-annotations
Source: iDSBridgeJ.exe, 0000000D.00000003.2723257464.0000000026342000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2725196452.000000002639C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-trees
Source: iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-treesor
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/balance-syntax-treess/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/dynamic
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/id-idref-checking
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/identity-constraint-checking
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checking
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema-full-checkingpX
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/augment-psvi
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/augment-psvi$_
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-default
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/element-defaultDXN
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/ignore-xsi-type-until-elemdecl
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/schema/normalized-value
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/unparsed-entity-checking
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/unparsed-entity-checkingH
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000057AF000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-duplicate-attdef
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/validation/warn-on-undeclared-elemdef
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydef
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydeforg/ap:
Source: iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/warn-on-duplicate-entitydeftionIm
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-base-uris
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005641000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xinclude/fixup-language
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/features/xincludeE
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007A41000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/propert
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/current-element-node
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/current-element-node:
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/dom/document-class-name
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/er
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/erxs/i
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/input-buffer-size
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/input-buffer-size2
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/datatype-validator-factory(6
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scanner
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/document-scannerramete
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-processor
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/dtd-scanner
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005822000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005769000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-manager4
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/entity-resolver
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-handler
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005822000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005769000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporter
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/error-reporterN
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/grammar-pool
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-binder
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-binderLorg/a&
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005641000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000585D000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-context
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/namespace-contexttatio
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/symbol-table
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validation-manager
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/dtd0
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/schema
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/validator/schema/lang/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005641000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/internal/xinclude-handler
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/schema/external-schemaLocation
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000078CB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/security-manager
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://apache.org/xml/properties/validation/schema/root-type-definition
Source: iDSBridgeJ.exe, 0000000D.00000003.2727762557.00000000251A3000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727762557.00000000251AC000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727762557.000000002519A000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024DAC000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024D69000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://asm.objectweb.org
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000099F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004C00000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://bugreport.sun.com/bugreport/
Source: iDSBridgeJ.exe, 0000000D.00000003.2727762557.00000000251F9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/collections/
Source: iDSBridgeJ.exe, 0000000D.00000003.2727762557.00000000251F9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/io/
Source: iDSBridgeJ.exe, 0000000D.00000003.2726225582.0000000025213000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/lang/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000065AB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/logging/tech.html.
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000065AB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/logging/troubleshooting.html.
Source: iDSBridgeJ.exe, 0000000D.00000003.2727762557.0000000025236000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024E36000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/net/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000658C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://commons.apache.org/proper/commons-logging/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256F3000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://github.com/FasterXML/jackson
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000008CB2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D75000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.000000000496B000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://glassfish.java.net/public/CDDL
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025650000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://hibernate.org
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005AA5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://jakarta.apache.org/log4j/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000009DD8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000099F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004C00000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://java.oracle.com/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007A41000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005B8A000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005EB0000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007046000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaLanguage
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000078CB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaSource
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://java.sun.com/xml/jaxp/properties/schemaSource/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://javax.xml.XMLConstants/feature/secure-processing
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005381000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://logging.apache.org/log
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005319000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005302000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D90000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://logging.apache.org/log4j/1.2
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005D2F000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005EB0000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005AA5000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005924000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://logging.apache.org/log4j/1.2/apidocs/org/apache/log4j/xml/doc-files/log4j.dtd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005381000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://logging.apache.org/log4j/1.2/faq.html#noconfig
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005319000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://logging.apache.org/log4j/1.2/faq.html#unload.
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000009795000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000983C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://mina.apache.org/
Source: iDSBridgeJ.exe, iDSBridgeJ.exe, 0000000D.00000003.2722032873.0000000026224000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000009E67000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2721617661.00000000261EC000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://null.sun.com/
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2140964625.0000000002330000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2688420496.0000000002088000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2142961414.0000000002198000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2679871491.000000000219C000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2142873948.00000000030F0000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2681695015.00000000021A0000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2673913631.0000000002194000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://schemas.microsof
Source: iDSBridgeJ.exe, iDSBridgeJ.exe, 0000000D.00000003.2672302551.0000000025247000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D0C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2726225582.0000000025246000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000003.2724318991.0000000024E47000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024E46000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004902000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://wiki.eclipse.org/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E18000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004A0E000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://wiki.glassfish.java.net/Wiki.jsp?page=J
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000009795000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000983C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005EB0000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025981000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025969000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000257D0000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000257BB000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B1000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256F3000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000257EA000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.000000002582B000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025842000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000257D9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000003.2729562235.0000000025A93000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005AA5000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000257C5000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025710000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025979000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000658C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256F3000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024E36000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256EB000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025961000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E74000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.cs.princeton.edu/~appel/modern/java/CUP/
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025979000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.eclipse.org/jetty
Source: iDSBridgeJ.exe, iDSBridgeJ.exe, 0000000D.00000003.2723257464.0000000026342000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2725196452.000000002639C000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AF39000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.example.org/
Source: iDSBridgeJ.exe, 0000000D.00000003.2723257464.0000000026342000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2725196452.000000002639C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.example.org/-Y
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2673913631.0000000002194000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.identalsoft.com/
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2688390187.0000000002081000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141022035.0000000002081000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2142961414.0000000002198000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2681653812.0000000002198000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000003.2673913631.0000000002194000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.identalsoft.com/&
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000000.2141721142.0000000000401000.00000020.00000001.01000000.00000004.sdmp String found in binary or memory: http://www.innosetup.com/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D75000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.000000000496B000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.000000002576A000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.jboss.org/jboss-transaction-api_1.1_spec
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000006E86000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024D57000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025688000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025690000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.000000002573D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000008CB2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D75000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.000000000496B000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.oracle.com/
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141406890.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141292235.0000000002330000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000000.2141721142.0000000000401000.00000020.00000001.01000000.00000004.sdmp String found in binary or memory: http://www.remobjects.com/ps
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141406890.00000000020A0000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141292235.0000000002330000.00000004.00001000.00020000.00000000.sdmp, iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000000.2141721142.0000000000401000.00000020.00000001.01000000.00000004.sdmp String found in binary or memory: http://www.remobjects.com/psU
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E0C000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.saxproject.org/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000052AD000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#StaticLoggerBinder
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005302000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024C60000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#log4j_version
Source: iDSBridgeJ.exe, 0000000D.00000002.3427340039.0000000025060000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#log4j_versionr
Source: iDSBridgeJ.exe, 0000000D.00000002.3427340039.0000000025060000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#log4j_versionrSj
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#multiple_bindings
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#null_LF
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#null_LFt
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#substituteLogger
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInit
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#unsuccessfulInitO
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004E6C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatch
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html#version_mismatchw
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.slf4j.org/codes.html-V
Source: iDSBridgeJ.exe String found in binary or memory: http://www.springframework.
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.or
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007F15000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/sch
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FAE000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BCF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/aop/spring-aop.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007E56000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007E56000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007B8E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007184000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/beans/spring-beans.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB3000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/c
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB9000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/cache
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/cache/spring-cache-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/cache/spring-cache-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/cache/spring-cache.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007E56000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context/spring-context-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context/spring-context-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context/spring-context-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context/spring-context-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007B8E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007184000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/context/spring-context.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FBF000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jdbc
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BE4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jdbc/spring-jdbc-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BE4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jdbc/spring-jdbc-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BE4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jdbc/spring-jdbc-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BE4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jdbc/spring-jdbc.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB9000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/jee/spring-jee.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB9000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/lang/spring-lang.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB3000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/p
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FC5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-2.0.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-2.0.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-2.0.4.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-3.0.3.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BEA000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/security/spring-security.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB9000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/task
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/task/spring-task-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/task/spring-task-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/task/spring-task-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/task/spring-task.xsd
Source: iDSBridgeJ.exe, 0000000D.00000003.2727446307.00000000260A2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007E56000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tool/spring-tool.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007184000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BF1000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BF1000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BF1000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BF1000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BF1000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007B8E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007184000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/tx/spring-tx.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007FB3000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util-2.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util-2.5.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util-3.0.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util-3.1.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util-3.2.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007BD5000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.springframework.org/schema/util/spring-util.xsd
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E0C000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.w3c.org/DOM/
Source: iDSBridgeJ.exe, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AE4E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AE70000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2723257464.0000000026342000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2725196452.000000002639C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://www.xom.nu/fakeRoot
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E74000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.
Source: iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.org/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E0C000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.org/commons/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E74000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.org/xalan-j/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.org/xerces2-j/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000887B000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.apache.org/xslt
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005EB0000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005641000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005210000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTD
Source: iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E3E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTDntNS
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/allow-dtd-events-after-endDTDrg/apac
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/external-general-entities
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/external-parameter-entities
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespace-prefixes
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727583496.0000000025E0C000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005822000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000AB33000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/namespaces
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/string-interning
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000050A2000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/use-entity-resolver2
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000544C000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005530000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005822000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007913000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005769000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000259B9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000054FB000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000053DE000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005417000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/features/validation
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005704000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007A41000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005B8A000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000005EB0000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000005780000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/
Source: iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/b
Source: iDSBridgeJ.exe, 0000000D.00000003.2724650280.0000000026014000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/declaration-handler
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/dom-node
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000007DA4000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/lexical-handler
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.00000000052F8000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2792508765.0000000025A40000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://xml.org/sax/properties/xml-string
Source: certutil.exe String found in binary or memory: https://%1/CertEnroll/nsrev_%3.asp
Source: certutil.exe, 0000000A.00000000.2665836640.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000A.00000002.2668757884.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000002.2673288626.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000000.2669897300.0000000001001000.00000020.00000001.01000000.0000000A.sdmp String found in binary or memory: https://%1/CertEnroll/nsrev_%3.aspldap:///CN=%7%8
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D90000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://eclipse.org/jetty
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256EB000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/FasterXML/jackson-core
Source: iDSBridgeJ.exe, 0000000D.00000003.2726225582.00000000251F1000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2726225582.00000000251DF000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000003.2727762557.00000000251E9000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004CBD000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024DE8000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2786913062.0000000024DF2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://github.com/haraldk/TwelveMonkeys/common/co
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.00000000256D3000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://github.com/haraldk/TwelveMonkeys/imageio/i
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E18000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025728000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004A0E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: https://glassfish.dev.java.net
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000836F000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000082AA000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004E18000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000008377000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025728000.00000004.00000020.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004A0E000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025718000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://glassfish.dev.java.net/nonav/public/CDDL
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.000000000836F000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000082AA000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000008377000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025718000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://glassfish.java.net
Source: iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.0000000025690000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://glassfish.java.net/nonav/public/CDDL
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.0000000004D21000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2764198138.0000000004916000.00000004.00001000.00020000.00000000.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2789182107.000000002573D000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://glassfish.java.net/public/CDDL

E-Banking Fraud
barindex
Registers a new ROOT certificate
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -addstore Root "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer" startup_14
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -addstore Root "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer" b_94062c9b Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01049178 CertEnumCertificatesInStore,CertCreateCertificateContext,CertAddCertificateContextToStore,CertAddCertificateContextToStore,CertCompareCertificateName,CertOpenStore,CertAddCertificateContextToStore,CertFreeCTLContext,CertCloseStore, 10_2_01049178
Drops certificate files (DER)
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-DFTCM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer (copy) Jump to dropped file
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010399A3 CryptAcquireContextW,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptImportKey,CertFreeCTLContext,CryptReleaseContext,LocalFree,LocalFree,LocalFree,CryptDestroyKey, 10_2_010399A3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105488D CryptImportPublicKeyInfo,CryptGenKey,CryptGenRandom,CryptDestroyKey,CryptGetUserKey,CryptImportKey,CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,LocalFree,LocalFree,LocalFree,LocalFree, 10_2_0105488D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102D55A LocalAlloc,CryptCreateHash,CryptHashData,CryptGetHashParam,CryptImportKey,CryptSetKeyParam,CryptSetKeyParam,CryptSetKeyParam,CryptCreateHash,CryptHashData,CryptHashData,CryptHashData,CryptGetHashParam,CryptSetKeyParam,LocalFree,LocalFree,LocalFree,LocalFree,CryptDestroyHash,CryptDestroyHash,CryptDestroyHash, 10_2_0102D55A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0103BC0A CryptAcquireContextW,CryptImportKey,CryptImportKey,CryptImportKey,CertSetCertificateContextProperty,CertAddCertificateContextToStore,LocalFree,LocalFree,CryptDestroyKey,CryptReleaseContext,LocalFree, 10_2_0103BC0A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01054C84 CryptAcquireContextW,CryptImportKey,CryptDestroyKey,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptDestroyKey,CryptReleaseContext,CryptAcquireContextW,CryptDestroyKey,CryptReleaseContext,LocalFree, 10_2_01054C84
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102AFB5 CertAddEncodedCertificateToStore,StringFromCLSID,CryptAcquireContextW,CryptImportKey,CertSetCertificateContextProperty,CryptDestroyKey,CryptReleaseContext,CoTaskMemFree,CertFreeCTLContext, 10_2_0102AFB5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105A7CE CryptGetUserKey,CryptReleaseContext,CryptImportKey,LocalFree,CryptDestroyKey,CryptDestroyKey,CryptReleaseContext,CryptDestroyKey,CryptReleaseContext, 10_2_0105A7CE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102B693 CryptCreateHash,CryptHashData,CryptGetHashParam,CryptGetUserKey,CryptGetUserKey,CryptGetUserKey,CryptImportKey,CryptDecrypt,CryptDestroyKey,CryptDestroyKey,CryptDestroyHash,LocalFree,CryptDestroyKey, 10_2_0102B693
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010386A0 CertCreateCertificateContext,CryptAcquireContextW,CryptImportKey,CertFreeCTLContext,LocalFree,CryptDestroyKey,CryptReleaseContext, 10_2_010386A0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010396EC CryptImportKey,CryptSetKeyParam,LocalFree,CertFreeCTLContext,CryptDestroyKey, 10_2_010396EC
Contains functionality to call native functions
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00423B84 NtdllDefWindowProc_A, 2_2_00423B84
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004125D8 NtdllDefWindowProc_A, 2_2_004125D8
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004785E0 NtdllDefWindowProc_A, 2_2_004785E0
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004573E0 PostMessageA,PostMessageA,SetForegroundWindow,NtdllDefWindowProc_A, 2_2_004573E0
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0042F520 NtdllDefWindowProc_A, 2_2_0042F520
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_00404D5A GetWindowLongA,CallWindowProcA,RemovePropA,RemovePropA,RemovePropA,RevokeDragDrop,SetWindowLongA,NtdllDefWindowProc_A, 8_2_00404D5A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_00409901 sprintf,GetPropA,HeapFree,HeapFree,HeapFree,RemovePropA,CallWindowProcA,NtdllDefWindowProc_A, 8_2_00409901
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_004061E3 GetPropA,DefFrameProcA,SetLastError,NtdllDefWindowProc_A, 8_2_004061E3
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0106B253 NtQuerySystemTime,RtlTimeToSecondsSince1970, 10_2_0106B253
Contains functionality to communicate with device drivers
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0042E934: CreateFileA,DeviceIoControl,GetLastError,CloseHandle,SetLastError, 2_2_0042E934
Contains functionality to shutdown / reboot the system
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00409448 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx, 0_2_00409448
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004555E4 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx, 2_2_004555E4
Creates files inside the system directory
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe File created: C:\Windows\certutil.log Jump to behavior
Detected potential crypto function
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_0040840C 0_2_0040840C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004804DB 2_2_004804DB
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0047051C 2_2_0047051C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00467218 2_2_00467218
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0048D9F0 2_2_0048D9F0
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0043035C 2_2_0043035C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004444C8 2_2_004444C8
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004345C4 2_2_004345C4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004866B4 2_2_004866B4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00444A70 2_2_00444A70
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00430EE8 2_2_00430EE8
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0045EF38 2_2_0045EF38
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0045AFC4 2_2_0045AFC4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00445168 2_2_00445168
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00469278 2_2_00469278
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004352C8 2_2_004352C8
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00445574 2_2_00445574
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00487614 2_2_00487614
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004519BC 2_2_004519BC
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0043DD50 2_2_0043DD50
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_0040E2BA 8_2_0040E2BA
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_00407D10 8_2_00407D10
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_00407FC0 8_2_00407FC0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104C167 10_2_0104C167
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101C994 10_2_0101C994
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01069870 10_2_01069870
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0104521D 10_2_0104521D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01068DB0 10_2_01068DB0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01067CA0 10_2_01067CA0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01068780 10_2_01068780
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632F6EB 13_3_2632F6EB
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632F6EB 13_3_2632F6EB
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632F6EB 13_3_2632F6EB
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632F6EB 13_3_2632F6EB
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632E5EF 13_3_2632E5EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632E5EF 13_3_2632E5EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632E5EF 13_3_2632E5EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_2632E5EF 13_3_2632E5EF
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_262E578C 13_3_262E578C
Found potential string decryption / allocating functions
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00408C0C appears 45 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00406AC4 appears 43 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 0040595C appears 117 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00403400 appears 60 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00445DD4 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 004344DC appears 32 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 004078F4 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00457D6C appears 73 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00403494 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00403684 appears 224 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00457B60 appears 97 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 00453344 appears 94 times
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: String function: 004460A4 appears 59 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 6F33D1A3 appears 37 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 6F339AB0 appears 34 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 01056431 appears 303 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 0101B5B1 appears 41 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 0104EEF2 appears 43 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 01051224 appears 64 times
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: String function: 6F335B80 appears 40 times
PE file contains executable resources (Code or Archives)
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp.0.dr Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp.0.dr Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp.0.dr Static PE information: Resource name: RT_VERSION type: 370 sysV pure executable not stripped
Source: is-37ER4.tmp.2.dr Static PE information: Resource name: RT_RCDATA type: PE32+ executable (console) x86-64, for MS Windows
Source: is-37ER4.tmp.2.dr Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Source: is-37ER4.tmp.2.dr Static PE information: Resource name: RT_VERSION type: 370 sysV pure executable not stripped
Sample file is different than original file name gathered from version info
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141406890.00000000020A0000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenameshfolder.dll~/ vs iDentalSoftBridgeSetup_12.2.0_x86 (1).exe
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe, 00000000.00000003.2141292235.0000000002330000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenameshfolder.dll~/ vs iDentalSoftBridgeSetup_12.2.0_x86 (1).exe
Uses 32bit PE files
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
Source: is-JSVPI.tmp.2.dr Static PE information: Section: .MPRESS1 ZLIB complexity 1.00078125
Source: classification engine Classification label: sus32.bank.evad.winEXE@39/799@0/1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0106B36C wcscmp,wcscmp,wcscmp,FreeLibrary,wcscpy,LoadLibraryExW,FormatMessageW,FormatMessageW,GetLastError,_itoa,FormatMessageW,WideCharToMultiByte,GetLastError, 10_2_0106B36C
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00409448 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx, 0_2_00409448
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004555E4 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx, 2_2_004555E4
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105C79B GetCurrentThread,OpenThreadToken,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,CloseHandle,CloseHandle, 10_2_0105C79B
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00455E0C GetModuleHandleA,GetProcAddress,GetDiskFreeSpaceExA,GetDiskFreeSpaceA, 2_2_00455E0C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00456564 CoCreateInstance,CoCreateInstance,SysFreeString,SysFreeString, 2_2_00456564
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00409BEC FindResourceA,SizeofResource,LoadResource,LockResource, 0_2_00409BEC
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Users\user\AppData\Local\Programs Jump to behavior
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5348:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2144:120:WilError_03
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Mutant created: NULL
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6948:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4048:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2716:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6864:120:WilError_03
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2632:120:WilError_03
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe File created: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\3F88.tmp\iDental-Agent.bat""
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: .OCP 10_2_0101C824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: +certutil.log 10_2_0101C824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: certutil.exe 10_2_0101C824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: CertUtilApp 10_2_0101C824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: CertUtilApp 10_2_0101C824
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Command line argument: certutil.exe 10_2_0101C824
Source: C:\Windows\SysWOW64\taskkill.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "iDSBridgeNative.exe")
Source: C:\Windows\SysWOW64\tasklist.exe WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File read: C:\Windows\win.ini Jump to behavior
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization Jump to behavior
Source: iDSBridgeJ.exe String found in binary or memory: ;q(Lorg/springframework/instrument/classloading/LoadTimeWeaver;)V
Source: iDSBridgeJ.exe String found in binary or memory: 7--launcher.openFile /SWTINTERNAL_ID
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe File read: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe "C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe"
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Process created: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp "C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp" /SL5="$2040C,76918457,64512,C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe"
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe"
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -delstore Root localgateway.iDentalSoft
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\3F88.tmp\iDental-Agent.bat""
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -addstore Root "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer"
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage\bf02f2a4d931bd0.timestamp /grant "everyone":(OI)(CI)M
Source: C:\Windows\SysWOW64\icacls.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\icacls.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM iDSBridgeNative.exe
Source: C:\Windows\SysWOW64\taskkill.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\tasklist.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe"
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe "C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe"
Source: unknown Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe"
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5504.tmp\iDental-Agent.bat""
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Process created: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp "C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp" /SL5="$2040C,76918457,64512,C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe" Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe" Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -delstore Root localgateway.iDentalSoft Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -addstore Root "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer" Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\3F88.tmp\iDental-Agent.bat"" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage\bf02f2a4d931bd0.timestamp /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM iDSBridgeNative.exe Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe "C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe" Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5504.tmp\iDental-Agent.bat""
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: mpr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: version.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: shfolder.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: rstrtmgr.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: explorerframe.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: sfc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: sfc_os.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: linkinfo.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: ntshrui.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: cscapi.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: appresolver.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: bcp47langs.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: slc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: sppc.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: msimg32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certadm.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certcli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: atl.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certcli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptnet.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptui.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: ntdsapi.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: atl.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptui.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: version.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: winscard.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: devobj.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: dsrole.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: logoncli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: logoncli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: samcli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: cmdext.dll Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: winmm.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: version.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certadm.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certcli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptnet.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptui.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netapi32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: ntdsapi.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: secur32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: version.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: wininet.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: winscard.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: atl.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: certcli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: atl.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: cryptui.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netapi32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: secur32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: devobj.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: logoncli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: dsrole.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: samcli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: srvcli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netutils.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: netutils.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: sspicli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: sspicli.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\icacls.exe Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\icacls.exe Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: version.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\tasklist.exe Section loaded: profapi.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: apphelp.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: bridgenative.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: bridgecommon.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: msvcp140.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: vcruntime140.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: bridgecommon.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: mfc140.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: msvcp140.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: vcruntime140.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: msvcp100.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: msvcr100.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: msvcr100.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: msimg32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: cmdext.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wsock32.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: winmm.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: version.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wldp.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: profapi.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: mswsock.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: usp10.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wininet.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: propsys.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: textshaping.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: textinputframework.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: coreuicomponents.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wintypes.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wintypes.dll
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32 Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Window found: window name: TMainForm Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Install
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: Next >
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Automated click: I accept the agreement
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Automated click: OK
Source: Window Recorder Window detected: More than 3 window changes detected
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static PE information: certificate valid
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Static file information: File size 77230776 > 1048576
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcr100.dll Jump to behavior
Source: Binary string: certadm.pdb source: certutil.exe, certutil.exe, 0000000A.00000002.2669008237.000000006F331000.00000020.00000001.01000000.0000000C.sdmp, certutil.exe, 0000000E.00000002.2673574475.000000006F331000.00000020.00000001.01000000.0000000C.sdmp
Source: Binary string: msvcp100.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386023496.000000006D3A1000.00000020.00000001.01000000.0000001C.sdmp
Source: Binary string: vcruntime140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386869503.000000006E941000.00000020.00000001.01000000.0000001A.sdmp
Source: Binary string: vcruntime140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3386869503.000000006E941000.00000020.00000001.01000000.0000001A.sdmp
Source: Binary string: msvcr100.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3385289449.000000006D2E1000.00000020.00000001.01000000.0000001D.sdmp
Source: Binary string: certcli.pdb source: certutil.exe, certutil.exe, 0000000A.00000002.2669135112.0000000077B91000.00000020.00000001.01000000.0000000D.sdmp, certutil.exe, 0000000E.00000002.2673731472.0000000077B91000.00000020.00000001.01000000.0000000D.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libnet\net.pdb source: iDSBridgeJ.exe, 0000001F.00000002.2795083135.000000006C46D000.00000002.00000001.01000000.00000013.sdmp
Source: Binary string: mfc140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3382093677.000000006C621000.00000020.00000001.01000000.0000001E.sdmp
Source: Binary string: mfc140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3382093677.000000006C621000.00000020.00000001.01000000.0000001E.sdmp
Source: Binary string: msvcp140.i386.pdbGCTL source: iDSBridgeNative.exe, 0000001A.00000002.3386386581.000000006E831000.00000020.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\iDSBridgeNative.pdb source: iDSBridgeNative.exe, 0000001A.00000000.2714981155.0000000000A66000.00000002.00000001.01000000.00000017.sdmp, iDSBridgeNative.exe, 0000001A.00000002.3381003468.0000000000A66000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\BridgeNative.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3387598309.0000000073888000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: certutil.pdb source: certutil.exe, certutil.exe, 0000000A.00000000.2665836640.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000A.00000002.2668757884.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000002.2673288626.0000000001001000.00000020.00000001.01000000.0000000A.sdmp, certutil.exe, 0000000E.00000000.2669897300.0000000001001000.00000020.00000001.01000000.0000000A.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libnet\net.pdby source: iDSBridgeJ.exe, 0000001F.00000002.2795083135.000000006C46D000.00000002.00000001.01000000.00000013.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\iDSBridgeNative.pdb'' source: iDSBridgeNative.exe, 0000001A.00000000.2714981155.0000000000A66000.00000002.00000001.01000000.00000017.sdmp, iDSBridgeNative.exe, 0000001A.00000002.3381003468.0000000000A66000.00000002.00000001.01000000.00000017.sdmp
Source: Binary string: msvcp140.i386.pdb source: iDSBridgeNative.exe, 0000001A.00000002.3386386581.000000006E831000.00000020.00000001.01000000.0000001B.sdmp
Source: Binary string: D:\IDS_workspace\source\7.1.0\dependencies\BridgeNative\bin\Release\x86\BridgeNative.pdb-- source: iDSBridgeNative.exe, 0000001A.00000002.3387598309.0000000073888000.00000002.00000001.01000000.00000018.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\libzip\zip.pdb source: iDSBridgeJ.exe, 0000001F.00000002.2793202587.000000006BE9A000.00000002.00000001.01000000.00000012.sdmp
Source: Binary string: c:\workspace\8-2-build-windows-i586-cygwin\jdk8u121\8372\build\windows-i586\jdk\objs\javaw_objs\javaw.pdb source: iDSBridgeJ.exe, 0000000D.00000000.2667545211.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000000D.00000002.3380614378.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000001F.00000000.2721460854.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp, iDSBridgeJ.exe, 0000001F.00000002.2763260153.0000000000B3C000.00000002.00000001.01000000.0000000B.sdmp

Data Obfuscation
barindex
Detected unpacking (changes PE section rights)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Unpacked PE file: 8.2.iDentalSoft-Bridge.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Unpacked PE file: 28.2.iDentalSoft-Bridge.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Contains functionality to dynamically determine API calls
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004502C0 GetVersion,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress, 2_2_004502C0
Entry point lies outside standard sections
Source: initial sample Static PE information: section where entry point is pointing to: .MPRESS2
PE file contains sections with non-standard names
Source: is-JSVPI.tmp.2.dr Static PE information: section name: .MPRESS1
Source: is-JSVPI.tmp.2.dr Static PE information: section name: .MPRESS2
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_004065C8 push 00406605h; ret 0_2_004065FD
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_004040B5 push eax; ret 0_2_004040F1
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00408104 push ecx; mov dword ptr [esp], eax 0_2_00408109
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00404185 push 00404391h; ret 0_2_00404389
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00404206 push 00404391h; ret 0_2_00404389
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_0040C218 push eax; ret 0_2_0040C219
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_004042E8 push 00404391h; ret 0_2_00404389
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00404283 push 00404391h; ret 0_2_00404389
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00408F38 push 00408F6Bh; ret 0_2_00408F63
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040994C push 00409989h; ret 2_2_00409981
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00483A6C push 00483B7Ah; ret 2_2_00483B72
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004062B4 push ecx; mov dword ptr [esp], eax 2_2_004062B5
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004104E0 push ecx; mov dword ptr [esp], edx 2_2_004104E5
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0049481C push ecx; mov dword ptr [esp], ecx 2_2_00494821
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00412928 push 0041298Bh; ret 2_2_00412983
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040CE38 push ecx; mov dword ptr [esp], edx 2_2_0040CE3A
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0048515C push ecx; mov dword ptr [esp], ecx 2_2_00485161
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00459120 push 00459164h; ret 2_2_0045915C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040F398 push ecx; mov dword ptr [esp], edx 2_2_0040F39A
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00443440 push ecx; mov dword ptr [esp], ecx 2_2_00443444
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040546D push eax; ret 2_2_004054A9
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040553D push 00405749h; ret 2_2_00405741
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004055BE push 00405749h; ret 2_2_00405741
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00477628 push ecx; mov dword ptr [esp], edx 2_2_00477629
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0040563B push 00405749h; ret 2_2_00405741
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004056A0 push 00405749h; ret 2_2_00405741
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004517F8 push 0045182Bh; ret 2_2_00451823
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004519BC push ecx; mov dword ptr [esp], eax 2_2_004519C1
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0045FB90 push ecx; mov dword ptr [esp], ecx 2_2_0045FB94
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00419C28 push ecx; mov dword ptr [esp], ecx 2_2_00419C2D
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00499D1C pushad ; retf 2_2_00499D2B
Source: is-JSVPI.tmp.2.dr Static PE information: section name: .MPRESS1 entropy: 7.9919065689091715

Persistence and Installation Behavior
barindex
Installs new ROOT certificates
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\68E3FE56532941E5707231791F8D4A173146399D Blob
Drops PE files
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\msvcp140.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TJRKV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcr100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcr120.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-EC551.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\npt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8R81H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jpeg.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\mfc100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\sunmscapi.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dt_shmem.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-AJT9U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_font_t2k.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javacpl.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\t2k.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-16G4J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\mfc140.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-4RUAM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\JAWTAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jdwp.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNativex64.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\net.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-OU1MJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certreq.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-DFA5D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\lcms.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\msvcp100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSDashboard.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BB5PB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\is-U4PV7.tmp Jump to dropped file
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File created: C:\Users\user\.swt\lib\win32\x86\swt-win32-4332.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\sunec.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-0UFA0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_d3d.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-03IUI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\npdeployJava1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E34MU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\is-MJAQO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_common.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GPUOT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-QSGEK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\resource.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-UPF22.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java-rmi.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-DQA0M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8B5J9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-9044A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2launcher.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Users\user\AppData\Local\Temp\is-NQDF9.tmp\_isetup\_shfoldr.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfr.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-EK3KP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2iexp.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\vcruntime140.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\client\is-CPU5F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ktab.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\nio.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\JavaDDE.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RLB9D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2native.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\WindowsAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsoundds.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\decora_sse.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javaw.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ssv.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1SFSS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-IH3MV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-6SK0G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RHOV8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java_crw_demo.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-81F63.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\client\jvm.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-80MMG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-87KCD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\rmiregistry.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-V5RFN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dt_socket.dll (copy) Jump to dropped file
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe File created: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C8J3S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K7HEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-PP5E3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-NLQ51.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-PK7TM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-ERD4S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TES04.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-JCHHI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4957E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\management.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\rmid.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-T8PP8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-3C7AJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\deployJava1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-9G93M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\verify.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IFNEP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1ILMQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\BridgeCommonx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoft-Bridge.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-3G5EA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\zip.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\tnameserv.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8S5P9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSJ.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-KL3FJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-H4RTI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\JavaDDEx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K3O7L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-37ER4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-DDN6J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1S91F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-635B0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\kinit.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\BridgeNative.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-THDCJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\TWAINDSM.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\w2k_lsa_auth.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_iio.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-6PM4K.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IPPDT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\glib-lite.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jjs.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\hprof.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2ssv.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jli.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\servertool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8SMD0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-PH1HN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_font.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-P7IK9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\mlib_image.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSCompressorJ.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-5IL4D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\BridgeCommon.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-6BR1D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsdt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\wsdetect.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\gstreamer-lite.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QTFL4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\msvcr100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ssvagent.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-R217A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\glass.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\splashscreen.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-JJBC3.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\j2pkcs11.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C36CL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\unins000.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-CK4OJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\TwainJNIx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsound.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-70VRK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Users\user\AppData\Local\Temp\is-NQDF9.tmp\_isetup\_setup64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\orbd.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-J3KRM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E7OLP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GAQUC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dcpr.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QGJIJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-64C6H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-Q1K3O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\is-JHDPG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\deploy.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcp120.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-H1N8H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-S1BEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RUP3V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certadm.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-55073.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javaws.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jawt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-O8F6O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-7HAU4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certcli.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-33NBO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\awt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\j2pcsc.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RRNSM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\TWAINDSMx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QTCMC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\instrument.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-U9P83.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4LN6F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\is-BK5HC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GO27Q.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-Q65KF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\pack200.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\fxplugins.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-RQ9QA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\unpack.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jaas_nt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\fontmanager.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-2C49U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\keytool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\unpack200.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-JSVPI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C2SKN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-L4EVF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\TwainJNI.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K28U7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-D65PD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QBLLD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GTIIP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-7J5B1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RFJLV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javacpl.cpl (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BSD0S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-D18FS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1SC48.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfxmedia.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfxwebkit.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TTFAR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4MQ70.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_sw.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-133N7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\kcms.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-P9TA9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-U5GQQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E9ND9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\is-81VOH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RODTM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\eula.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\is-JD61V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\msvcr100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSClientJ.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-L256E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E01S9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\BridgeNativex64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jabswitch.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\npjp2.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-AN89T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1K2V4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BSU7H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\klist.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IDVTK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\policytool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\bci.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RR4DS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\JavaAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-G9F45.tmp Jump to dropped file
Stores files to the Windows start menu directory
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iDentalSoft Bridge Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iDentalSoft Bridge\iDentalSoft Bridge.lnk Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp File created: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iDentalSoft Bridge\iDentalSoft Bridge Uninstall.lnk Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run iDentalSoft-Bridge Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run iDentalSoft-Bridge Jump to behavior
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0042285C SendMessageA,ShowWindow,ShowWindow,CallWindowProcA,SendMessageA,ShowWindow,SetWindowPos,GetActiveWindow,IsIconic,SetWindowPos,SetActiveWindow,ShowWindow, 2_2_0042285C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00423C0C IsIconic,PostMessageA,PostMessageA,PostMessageA,SendMessageA,IsWindowEnabled,IsWindowEnabled,IsWindowVisible,GetFocus,SetFocus,SetFocus,IsIconic,GetFocus,SetFocus, 2_2_00423C0C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00423C0C IsIconic,PostMessageA,PostMessageA,PostMessageA,SendMessageA,IsWindowEnabled,IsWindowEnabled,IsWindowVisible,GetFocus,SetFocus,SetFocus,IsIconic,GetFocus,SetFocus, 2_2_00423C0C
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004241DC IsIconic,SetActiveWindow,SetFocus, 2_2_004241DC
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00424194 IsIconic,SetActiveWindow, 2_2_00424194
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00418384 IsIconic,GetWindowPlacement,GetWindowRect,GetWindowLongA,GetWindowLongA,ScreenToClient,ScreenToClient, 2_2_00418384
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00483420 IsIconic,GetWindowLongA,ShowWindow,ShowWindow, 2_2_00483420
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00417598 IsIconic,GetCapture, 2_2_00417598
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00417CCE IsIconic,SetWindowPos, 2_2_00417CCE
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00417CD0 IsIconic,SetWindowPos,GetWindowPlacement,SetWindowPlacement, 2_2_00417CD0
Extensive use of GetProcAddress (often used to hide API calls)
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0041F118 GetVersion,SetErrorMode,LoadLibraryA,SetErrorMode,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,FreeLibrary, 2_2_0041F118
Uses cacls to modify the permissions of files
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\tasklist.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe Process information set: NOOPENFILEERRORBOX
Contains functionality to detect virtual machines (SLDT)
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Code function: 13_3_26224000 sldt word ptr [eax] 13_3_26224000
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcr120.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TJRKV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-EC551.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\npt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8R81H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jpeg.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\sunmscapi.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\mfc100.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dt_shmem.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_font_t2k.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javacpl.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\t2k.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-16G4J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\JAWTAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jdwp.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-4RUAM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\net.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNativex64.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-OU1MJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certreq.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\lcms.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-DFA5D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BB5PB.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\is-U4PV7.tmp Jump to dropped file
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Dropped PE file which has not been started: C:\Users\user\.swt\lib\win32\x86\swt-win32-4332.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\sunec.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-0UFA0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_d3d.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-03IUI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\npdeployJava1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\is-MJAQO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_common.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E34MU.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-QSGEK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\resource.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-UPF22.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java-rmi.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-DQA0M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-9044A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2launcher.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8B5J9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-NQDF9.tmp\_isetup\_shfoldr.dll Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfr.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-EK3KP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2iexp.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\nio.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ktab.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\client\is-CPU5F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\JavaDDE.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2native.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RLB9D.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\WindowsAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsoundds.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\decora_sse.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ssv.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1SFSS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-IH3MV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-6SK0G.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RHOV8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java_crw_demo.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\client\jvm.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-81F63.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-80MMG.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\rmiregistry.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-87KCD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-V5RFN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dt_socket.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C8J3S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K7HEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-NLQ51.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-PK7TM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-ERD4S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TES04.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-JCHHI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\java.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4957E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\management.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\rmid.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-T8PP8.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-3C7AJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\deployJava1.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-9G93M.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\verify.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IFNEP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1ILMQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\BridgeCommonx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-3G5EA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\zip.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\tnameserv.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8S5P9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-KL3FJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-H4RTI.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\JavaDDEx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K3O7L.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-37ER4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-DDN6J.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1S91F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-635B0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\kinit.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\TWAINDSM.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-THDCJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\w2k_lsa_auth.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_iio.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-6PM4K.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IPPDT.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jjs.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\glib-lite.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jp2ssv.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\hprof.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jli.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\servertool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-8SMD0.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-PH1HN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javafx_font.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\mlib_image.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsdt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\wsdetect.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\gstreamer-lite.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QTFL4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\ssvagent.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-R217A.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\glass.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\splashscreen.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\j2pkcs11.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C36CL.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\unins000.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-CK4OJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\TwainJNIx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jsound.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-NQDF9.tmp\_isetup\_setup64.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-70VRK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\orbd.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-J3KRM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E7OLP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GAQUC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dcpr.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-64C6H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QGJIJ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-Q1K3O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\deploy.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\msvcp120.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-H1N8H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-S1BEV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RUP3V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-55073.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javaws.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jawt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-O8F6O.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-7HAU4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-33NBO.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\j2pcsc.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\awt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\TWAINDSMx64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\instrument.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QTCMC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-U9P83.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4LN6F.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\dtplugin\is-BK5HC.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GO27Q.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-Q65KF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\pack200.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\fxplugins.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-RQ9QA.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\unpack.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jaas_nt.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\fontmanager.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-2C49U.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\keytool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\unpack200.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-C2SKN.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\TwainJNI.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-L4EVF.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-K28U7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-D65PD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-QBLLD.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-GTIIP.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-7J5B1.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RFJLV.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\javacpl.cpl (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BSD0S.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\is-D18FS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1SC48.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfxmedia.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jfxwebkit.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-TTFAR.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-4MQ70.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\prism_sw.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-133N7.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\kcms.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-P9TA9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E9ND9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-U5GQQ.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\is-81VOH.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RODTM.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\eula.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\is-JD61V.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-L256E.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-E01S9.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\BridgeNativex64.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\jabswitch.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\plugin2\npjp2.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-AN89T.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-1K2V4.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-BSU7H.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\klist.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-IDVTK.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\policytool.exe (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\bci.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-RR4DS.tmp Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\JavaAccessBridge-32.dll (copy) Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Dropped PE file which has not been started: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\is-G9F45.tmp Jump to dropped file
Found evasive API chain (date check)
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Evasive API call chain: GetSystemTime,DecisionNodes
Found large amount of non-executed APIs
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe API coverage: 1.8 %
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Uses the system / local time for branch decision (may execute only at specific dates)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0102BAF4 GetSystemTime followed by cmp: cmp word ptr [ebp+3eh], cx and CTI: jbe 0102BC3Fh 10_2_0102BAF4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00452A60 FindFirstFileA,GetLastError, 2_2_00452A60
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00474DFC FindFirstFileA,FindNextFileA,FindClose, 2_2_00474DFC
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004625C4 FindFirstFileA,FindNextFileA,FindClose, 2_2_004625C4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00463B50 SetErrorMode,FindFirstFileA,FindNextFileA,FindClose,SetErrorMode, 2_2_00463B50
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00497C14 FindFirstFileA,SetFileAttributesA,FindNextFileA,FindClose, 2_2_00497C14
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00463FCC SetErrorMode,FindFirstFileA,FindNextFileA,FindClose,SetErrorMode, 2_2_00463FCC
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105B191 FindFirstFileW,LocalFree,FindNextFileW,FindClose,LocalFree, 10_2_0105B191
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010501C5 wcslen,LocalAlloc,wcscpy,wcscpy,wcsrchr,FindFirstFileW,wcscpy,lstrcmpW,lstrcmpW,DeleteFileW,FindNextFileW,FindClose,LocalFree,LocalFree,LocalFree, 10_2_010501C5
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105902A wcslen,wcscpy,wcscat,FindFirstFileW,FindNextFileW,FindClose, 10_2_0105902A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105A048 FindFirstFileW,FindNextFileW,FindClose,LocalFree, 10_2_0105A048
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010590DE wcslen,wcscpy,wcscpy,wcscat,FindFirstFileW,wcslen,wcscpy,DeleteFileW,FindNextFileW,FindClose, 10_2_010590DE
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105AA90 wcslen,wcslen,wcscpy,wcscat,wcscat,wcscat,FindFirstFileW,FindNextFileW,wcslen,wcscpy,FindClose,wcslen,wcslen,LocalAlloc,wcscpy,wcscat,wcscat, 10_2_0105AA90
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0105960F wcschr,wcslen,wcscpy,wcscat,FindFirstFileW,wcslen,wcscpy,wcsrchr,_wcsnicmp,iswxdigit,wcstoul,FindNextFileW,LocalFree,LocalFree,LocalFree,FindClose, 10_2_0105960F
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_6F338862 WritePrivateProfileStringW,wcscpy,wsprintfW,wcscpy,wcschr,RegQueryValueExW,wcscpy,wcsrchr,FindFirstFileW,wcstoul,wcscpy,DeleteFileW,FindNextFileW,LocalFree,LocalFree,LocalFree,LocalFree,FindClose, 10_2_6F338862
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00409B30 GetSystemInfo,VirtualQuery,VirtualProtect,VirtualProtect,VirtualQuery, 0_2_00409B30
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\x86\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\win32\x86\swt-win32-4332.dll Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\ Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe File opened: C:\Users\user\.swt\lib\ Jump to behavior
Source: iDSBridgeJ.exe, 0000000D.00000003.2668355442.000000002506E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000065AB000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: java/lang/VirtualMachineError
Source: iDSBridgeJ.exe, 0000000D.00000003.2668355442.000000002506E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: %com/sun/corba/se/impl/util/SUNVMCID.classPK
Source: iDSBridgeJ.exe, 0000000D.00000003.2668355442.000000002506E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: org/omg/CORBA/OMGVMCID.classPK
Source: iDSBridgeJ.exe, 0000000D.00000002.3382842253.0000000002965000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 6aq[Ljava/lang/VirtualMachineError;
Source: iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp, 00000002.00000002.2685002468.000000000071E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\s
Source: iDSBridgeJ.exe, 0000000D.00000002.3382842253.0000000002965000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: cjava/lang/VirtualMachineError
Source: iDSBridgeJ.exe, 0000000D.00000002.3384849193.00000000065AB000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: java.lang.VirtualMachineError
Source: iDSBridgeJ.exe, 0000000D.00000003.2668355442.000000002506E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: java/lang/VirtualMachineError.classPK
Source: iDSBridgeJ.exe, 0000000D.00000002.3381174499.0000000000C38000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process information queried: ProcessInformation Jump to behavior
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA14E7 #203,GetLastError,#205,_vsnprintf,_snprintf,EnterCriticalSection,IsDebuggerPresent,GetStdHandle,_iob,_iob,fflush,fflush,OutputDebugStringA,LeaveCriticalSection,SetLastError, 10_2_77BA14E7
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA14E7 #203,GetLastError,#205,_vsnprintf,_snprintf,EnterCriticalSection,IsDebuggerPresent,GetStdHandle,_iob,_iob,fflush,fflush,OutputDebugStringA,LeaveCriticalSection,SetLastError, 10_2_77BA14E7
Contains functionality to dynamically determine API calls
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_004502C0 GetVersion,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress, 2_2_004502C0
Enables debug privileges
Source: C:\Windows\SysWOW64\taskkill.exe Process token adjusted: Debug
Source: C:\Windows\SysWOW64\tasklist.exe Process token adjusted: Debug
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_00404210 SetUnhandledExceptionFilter, 8_2_00404210
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Code function: 8_2_004040C0 SetUnhandledExceptionFilter,SetUnhandledExceptionFilter,SetUnhandledExceptionFilter, 8_2_004040C0
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_010478B9 SetUnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 10_2_010478B9
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_6F339880 SetUnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 10_2_6F339880
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9F7CD #14,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 10_2_77B9F7CD
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Memory protected: page read and write | page guard Jump to behavior

HIPS / PFW / Operating System Protection Evasion
barindex
Contains functionality to prevent local Windows debugging
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77BA0C49 #201,IsDebuggerPresent,DebugBreak, 10_2_77BA0C49
Contains functionality to launch a program with higher privileges
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00478024 ShellExecuteEx,GetLastError,MsgWaitForMultipleObjects,GetExitCodeProcess,CloseHandle, 2_2_00478024
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe" Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -delstore Root localgateway.iDentalSoft Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Process created: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe" -addstore Root "C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\BridgeSelfCertificate.cer" Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\3F88.tmp\iDental-Agent.bat"" Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\icacls.exe icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage\bf02f2a4d931bd0.timestamp /grant "everyone":(OI)(CI)M Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM iDSBridgeNative.exe Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\tasklist.exe tasklist Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe "C:\Program Files (x86)\iDentalSoft Bridge\iDSBridgeNative.exe" Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\iDentalSoft-Bridge.exe Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\5504.tmp\iDental-Agent.bat""
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe "C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ" -Xss1m -Xms512M -Xmx512M -XX:MaxPermSize=256M -cp "C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.jar";etc\ com.iss.idental.bridge.main.BridgeApplicationMain
Uses taskkill to terminate processes
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM iDSBridgeNative.exe Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0042E09C AllocateAndInitializeSid,GetVersion,GetModuleHandleA,GetProcAddress,CheckTokenMembership,GetCurrentThread,OpenThreadToken,GetLastError,GetCurrentProcess,OpenProcessToken,GetTokenInformation,GetLastError,GetTokenInformation,EqualSid,CloseHandle,FreeSid, 2_2_0042E09C
Contains functionality to query locales information (e.g. system language)
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: GetLocaleInfoA, 0_2_0040520C
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: GetLocaleInfoA, 0_2_00405258
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: GetLocaleInfoA, 2_2_00408568
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: GetLocaleInfoA, 2_2_004085B4
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Queries volume information: C:\Program Files (x86)\iDentalSoft Bridge\iDentalSoftBridge.lck VolumeInformation Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_00458418 GetTickCount,QueryPerformanceCounter,GetSystemTimeAsFileTime,GetCurrentProcessId,CreateNamedPipeA,GetLastError,CreateFileA,SetNamedPipeHandleState,CreateProcessA,CloseHandle,CloseHandle, 2_2_00458418
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_004026C4 GetSystemTime, 0_2_004026C4
Source: C:\Users\user\AppData\Local\Temp\is-O58FB.tmp\iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp Code function: 2_2_0045559C GetUserNameA, 2_2_0045559C
Source: C:\Users\user\Desktop\iDentalSoftBridgeSetup_12.2.0_x86 (1).exe Code function: 0_2_00405CF4 GetVersionExA, 0_2_00405CF4
Source: C:\Program Files (x86)\iDentalSoft Bridge\jre\bin\iDSBridgeJ.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_0101FB0D DsGetDcNameW,DsBindW,DsCrackNamesW,wcslen,wcslen,wcslen,wcslen,wcslen,LocalAlloc,wsprintfW,DsUnBindW,NetApiBufferFree,DsFreeNameResultW,LocalFree,LocalFree,LocalFree, 10_2_0101FB0D
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_01020FFF wcschr,NetApiBufferFree,DsFreeNameResultW,#13,LocalFree,DsGetDcNameW,DsBindW,DsCrackNamesW,#145,#14,#73,#208,#26,#127,LocalFree,#140,#224,#167,#27,#224,#224,#41,NetApiBufferFree,DsUnBindW,DsFreeNameResultW,#13,LocalFree, 10_2_01020FFF
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9BDE1 RpcBindingFree, 10_2_77B9BDE1
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9BD1A wcslen,RpcNetworkIsProtseqValidW,RpcStringBindingComposeW,RpcBindingFromStringBindingW,RpcStringFreeW,RpcEpResolveBinding,RpcStringFreeW, 10_2_77B9BD1A
Source: C:\Program Files (x86)\iDentalSoft Bridge\bin\certutil\certutil.exe Code function: 10_2_77B9BC85 RpcMgmtInqServerPrincNameW,RpcBindingSetAuthInfoW,RpcStringFreeW, 10_2_77B9BC85
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1525215 Sample: iDentalSoftBridgeSetup_12.2... Startdate: 03/10/2024 Architecture: WINDOWS Score: 32 77 Detected unpacking (changes PE section rights) 2->77 79 Registers a new ROOT certificate 2->79 81 Sigma detected: System File Execution Location Anomaly 2->81 83 Contains functionality to prevent local Windows debugging 2->83 11 iDentalSoftBridgeSetup_12.2.0_x86 (1).exe 2 2->11         started        14 iDentalSoft-Bridge.exe 2->14         started        16 iDentalSoft-Bridge.exe 2->16         started        process3 file4 71 iDentalSoftBridgeS..._12.2.0_x86 (1).tmp, PE32 11->71 dropped 18 iDentalSoftBridgeSetup_12.2.0_x86 (1).tmp 28 435 11->18         started        22 cmd.exe 14->22         started        24 conhost.exe 14->24         started        process5 file6 63 C:\...\iDentalSoft-Bridge.exe (copy), MS-DOS 18->63 dropped 65 C:\...\certutil.exe (copy), PE32 18->65 dropped 67 C:\Users\user\AppData\Local\...\_shfoldr.dll, PE32 18->67 dropped 69 239 other files (none is malicious) 18->69 dropped 85 Registers a new ROOT certificate 18->85 26 certutil.exe 18->26         started        29 iDentalSoft-Bridge.exe 4 18->29         started        31 certutil.exe 2 18->31         started        33 iDSBridgeJ.exe 22->33         started        signatures7 process8 signatures9 87 Installs new ROOT certificates 26->87 35 conhost.exe 26->35         started        37 cmd.exe 1 29->37         started        39 conhost.exe 29->39         started        41 conhost.exe 31->41         started        process10 process11 43 iDSBridgeJ.exe 38 37->43         started        dnsIp12 75 127.0.0.1 unknown unknown 43->75 73 C:\Users\user\.swt\lib\...\swt-win32-4332.dll, PE32 43->73 dropped 47 icacls.exe 43->47         started        49 icacls.exe 43->49         started        51 taskkill.exe 43->51         started        53 2 other processes 43->53 file13 process14 process15 55 conhost.exe 47->55         started        57 conhost.exe 49->57         started        59 conhost.exe 51->59         started        61 conhost.exe 53->61         started       
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious

Private

IP
127.0.0.1