| File name: | transmission-3.00-x64.msi |
| Full analysis: | https://app.any.run/tasks/252f744b-f043-40ef-a431-1a088235a22d |
| Verdict: | No threats detected |
| Analysis date: | October 24, 2020, 20:30:22 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Tags: | |
| Indicators: | |
| MIME: | application/x-msi |
| File info: | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Transmission 3.00 Installer, Author: Transmission Project, Keywords: Installer, Comments: A Fast, Easy, and Free BitTorrent Client, Template: x64;1033, Revision Number: {65883CAA-72E2-42B8-B638-C84ACE59CB22}, Create Time/Date: Fri May 22 11:12:10 2020, Last Saved Time/Date: Fri May 22 11:12:10 2020, Number of Pages: 500, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2 |
| MD5: | 6E05C14D68FD3801898D98866099D2FC |
| SHA1: | 999CF7EC4F20926401D6FA5B49E59F2DB6DC1C9A |
| SHA256: | C34828A6D2C50C7C590D05CA50249B511D46E9A2A7223323FB3D1421E3F6B9D1 |
| SSDEEP: | 393216:3RZOpP18ft1d9FqljuvKc41iPvJUVeYkc7Jgg:hZOpPqrnYjkKD1iPGV1Jg |
MALICIOUS
No malicious indicators.SUSPICIOUS
Executed as Windows Service
- msiexec.exe (PID: 2216)
INFO
Reads the machine GUID from the registry
- msiexec.exe (PID: 3720)
- msiexec.exe (PID: 2216)
Reads the computer name
- msiexec.exe (PID: 3720)
- msiexec.exe (PID: 2216)
Checks supported languages
- msiexec.exe (PID: 3720)
Reads settings of System Certificates
- msiexec.exe (PID: 3720)
Checks Windows Trust Settings
- msiexec.exe (PID: 3720)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
TRiD
| .msi | | | Microsoft Windows Installer (98.5) |
|---|---|---|
| .msi | | | Microsoft Installer (100) |
EXIF
FlashPix
| CodePage: | Windows Latin 1 (Western European) |
|---|---|
| Title: | Installation Database |
| Subject: | Transmission 3.00 Installer |
| Author: | Transmission Project |
| Keywords: | Installer |
| Comments: | A Fast, Easy, and Free BitTorrent Client |
| Template: | x64;1033 |
| RevisionNumber: | {65883CAA-72E2-42B8-B638-C84ACE59CB22} |
| CreateDate: | 2020:05:22 10:12:10 |
| ModifyDate: | 2020:05:22 10:12:10 |
| Pages: | 500 |
| Words: | 2 |
| Software: | Windows Installer XML Toolset (3.11.2.4516) |
| Security: | Read-only recommended |
Total processes
35
Monitored processes
2
Malicious processes
0
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2216 | C:\Windows\system32\msiexec.exe /V | C:\Windows\system32\msiexec.exe | — | services.exe | |||||||||||
User: SYSTEM Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows� installer Exit code: 0 Version: 5.0.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| 3720 | "C:\Windows\System32\msiexec.exe" /i "C:\Users\admin\AppData\Local\Temp\transmission-3.00-x64.msi" | C:\Windows\System32\msiexec.exe | — | Explorer.EXE | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows� installer Exit code: 1633 Version: 5.0.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
Total events
3 715
Read events
3 700
Write events
15
Delete events
0
Modification events
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | LanguageList |
Value: en-US | |||
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | @%SystemRoot%\System32\fveui.dll,-844 |
Value: BitLocker Data Recovery Agent | |||
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | @%SystemRoot%\System32\fveui.dll,-843 |
Value: BitLocker Drive Encryption | |||
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | @%SystemRoot%\system32\dnsapi.dll,-103 |
Value: Domain Name System (DNS) Server Trust | |||
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | @%SystemRoot%\system32\qagentrt.dll,-10 |
Value: System Health Authentication | |||
| (PID) Process: | (3720) msiexec.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\143\52C64B7E |
| Operation: | write | Name: | @%SystemRoot%\system32\p2pcollab.dll,-8042 |
Value: Peer to Peer Trust | |||
Executable files
0
Suspicious files
0
Text files
0
Unknown types
0
Dropped files
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
0
DNS requests
0
Threats
0
HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report