File name: | Connect2019_1_2.msi |
Full analysis: | https://app.any.run/tasks/1ab6fefb-e1b9-4d72-adb3-1e25d4701bcf |
Verdict: | Malicious activity |
Analysis date: | March 21, 2019, 20:49:10 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-msi |
File info: | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Create Time/Date: Mon Jun 21 08:00:00 1999, Name of Creating Application: Windows Installer, Security: 1, Code page: 1252, Template: Intel;1033, Number of Pages: 200, Revision Number: {C81E991D-34C0-4504-BFE5-C4AFFBAE16EE}, Title: ConnectSetup, Author: Adobe Systems, Comments: MSI setup for Connect, Number of Words: 2, Last Saved Time/Date: Fri Jan 11 11:27:52 2019, Last Printed: Fri Jan 11 11:27:52 2019 |
MD5: | 02D1FD20EA9DAF3F7A0052B2D73D542C |
SHA1: | 093AAA2F05A63888CFF0B0847F6EBC5A1445CA46 |
SHA256: | 51FA3F5DCEC476F2E9C21B1B4326B4197ECFD59BB858744533397A0BCE22C64E |
SSDEEP: | 196608:gPU1wxaigI4RuU4ZPqEUREDOH7eNTVTyhxL2ozZhk4i:g8yxcdiyAmqbyyozZg |
.msi | | | Microsoft Windows Installer (98.5) |
---|---|---|
.msi | | | Microsoft Installer (100) |
LastPrinted: | 2019:01:11 11:27:52 |
---|---|
ModifyDate: | 2019:01:11 11:27:52 |
Words: | 2 |
Comments: | MSI setup for Connect |
Keywords: | - |
Author: | Adobe Systems |
Subject: | - |
Title: | ConnectSetup |
RevisionNumber: | {C81E991D-34C0-4504-BFE5-C4AFFBAE16EE} |
Pages: | 200 |
Template: | Intel;1033 |
CodePage: | Windows Latin 1 (Western European) |
Security: | Password protected |
Software: | Windows Installer |
CreateDate: | 1999:06:21 07:00:00 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2564 | "C:\Windows\System32\msiexec.exe" /i "C:\Users\admin\AppData\Local\Temp\Connect2019_1_2.msi" | C:\Windows\System32\msiexec.exe | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows® installer Exit code: 0 Version: 5.0.7600.16385 (win7_rtm.090713-1255) | ||||
1908 | C:\Windows\system32\msiexec.exe /V | C:\Windows\system32\msiexec.exe | services.exe | |
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows® installer Version: 5.0.7600.16385 (win7_rtm.090713-1255) | ||||
3432 | C:\Windows\system32\vssvc.exe | C:\Windows\system32\vssvc.exe | — | services.exe |
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Microsoft® Volume Shadow Copy Service Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
4080 | DrvInst.exe "1" "200" "STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot18" "" "" "6792c44eb" "00000000" "000005B4" "00000398" | C:\Windows\system32\DrvInst.exe | — | svchost.exe |
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Driver Installation Module Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
3132 | "C:\Program Files\Adobe\Connect\adobeconnectaddin.exe" /AdminModeInstall /ICONS= | C:\Program Files\Adobe\Connect\adobeconnectaddin.exe | msiexec.exe | |
User: admin Company: Adobe Systems Incorporated Integrity Level: MEDIUM Description: Adobe Connect Exit code: 0 Version: 2019.1.2.32 |
PID | Process | Filename | Type | |
---|---|---|---|---|
1908 | msiexec.exe | C:\System Volume Information\SPP\metadata-2 | — | |
MD5:— | SHA256:— | |||
4080 | DrvInst.exe | C:\Windows\INF\setupapi.dev.log | ini | |
MD5:78EE1F4816521DD0644824D092881B5B | SHA256:EB4DF3770498616E2870429469D371DDC135F484CB24C0706BA8419F55B56BAC | |||
1908 | msiexec.exe | C:\Windows\Installer\1009c6.msi | — | |
MD5:— | SHA256:— | |||
1908 | msiexec.exe | C:\Users\admin\AppData\Local\Temp\~DF68CA9A0AF3B8DD50.TMP | — | |
MD5:— | SHA256:— | |||
1908 | msiexec.exe | C:\System Volume Information\SPP\snapshot-2 | binary | |
MD5:1EBB3EF992E8B66BD6EBDEF2FE0C0A4A | SHA256:431EFBCDD92A566A4C51A527B37A9DF497D837A45056C46D7209099C58880486 | |||
4080 | DrvInst.exe | C:\Windows\INF\setupapi.ev3 | binary | |
MD5:76DCC60F78B3DFF1AE3627619074F465 | SHA256:18541AC1875315C4F9EFF75050C574FAFF83717C029DAE6B366F9C6C3F0C19E0 | |||
4080 | DrvInst.exe | C:\Windows\INF\setupapi.ev1 | binary | |
MD5:06E6E421427C2CCF67D412B5F51358B1 | SHA256:8A0E79E3752FC132D4DEF597356395BE70826F1A7D82F4C13E87DC171F16A1E0 | |||
1908 | msiexec.exe | C:\System Volume Information\SPP\OnlineMetadataCache\{1a55e0b7-c6fb-4281-9708-8f25c360d78b}_OnDiskSnapshotProp | binary | |
MD5:1EBB3EF992E8B66BD6EBDEF2FE0C0A4A | SHA256:431EFBCDD92A566A4C51A527B37A9DF497D837A45056C46D7209099C58880486 | |||
1908 | msiexec.exe | C:\Windows\Installer\MSIE69.tmp | — | |
MD5:— | SHA256:— | |||
1908 | msiexec.exe | C:\Windows\Installer\1009c9.msi | — | |
MD5:— | SHA256:— |