Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
jenkins.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Jenkins, Author: Jenkins Project, Keywords: Installer, Comments: Jenkins Automation Server, Template: x64;1033,
Revision Number: {976DD074-1202-4580-814B-4973B4C3EEB9}, Create Time/Date: Wed Oct 2 13:06:36 2024, Last Saved Time/Date:
Wed Oct 2 13:06:36 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset
(3.11.1.2318), Security: 2
|
initial sample
|
||
|
C:\Users\user\AppData\Local\Temp\MSIC095.tmp
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
modified
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\msiexec.exe
|
"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\jenkins.msi"
|
||
|
C:\Windows\System32\msiexec.exe
|
C:\Windows\system32\msiexec.exe /V
|
||
|
C:\Windows\SysWOW64\msiexec.exe
|
C:\Windows\syswow64\MsiExec.exe -Embedding 361666F5A55C0D6CC1FECD7EBD775BFC C
|