Automated Malware Analysis IOC Report for

Details

Filetype:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Eclipse Temurin Runtime Environment with Hotspot, Author: Eclipse Adoptium, Keywords: Installer, Comments: This installer database contains the logic and data required to install Eclipse Temurin JRE with Hotspot 11.0.23+9 (x64)., Revision Number: {C8CB6536-7163-45EE-B31E-E422CCE99350}, Create Time/Date: Wed Apr 17 22:27:18 2024, Last Saved Time/Date: Wed Apr 17 22:27:18 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.0.3910), Security: 2, Template: x64;1033,1031,3082,1036,1041,2052,1028
Entropy:	7.991587754590891
Filename:	OpenJDK11U-jre_x64_windows_hotspot_11.0.23_9.msi
Filesize:	31502336
MD5:	81a45a11fe5d2386355671dbeac3db3c
SHA1:	c5b0311efb35ebe73bed8092689c713a027287e8
SHA256:	6699a78e61c0d8208a6d43a3b4590fbabf77bb1c1b8b30d8140e62804fa286cb
SHA512:	61acfe9b0fe72b88022b5ad01a669cf01a6c495778f294e5311ada1931f46d839d9119e9d548b344a554a8443b002ac463ff9b1a4fac874d9d57b37b7e0bcf13
SSDEEP:	786432:UTta20Qw3zHKr/83DiF3zN5EXGgvur3BXOf1:0tH0QwzKrpjN5EXGAubBXm1
Preview:	........................>......................................................................................................................................................................................................................................

Signature Hits	Behavior Group	Mitre Attack
Sample is a Windows installer	System Summary
PE / OLE file has a valid certificate	Compliance, System Summary
Submission file is bigger than most known malware samples	System Summary

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\javaw.exe
Category:	dropped
Dump:	javaw.exe.1.dr
ID:	dr_55
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy:	6.550694973692935
Encrypted:	false
Size:	50056
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates autostart registry keys to launch java	Boot Survival	Registry Run Keys / Startup Folder
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Config.Msi\4fd552.rbs
Category:	modified
Dump:	4fd552.rbs.1.dr
ID:	dr_137
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	5.85780614937084
Encrypted:	false
Size:	101806
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-console-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-console-l1-1-0.dll.1.dr
ID:	dr_52
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.0191162839966665
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-datetime-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-datetime-l1-1-0.dll.1.dr
ID:	dr_78
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.032415853095634
Encrypted:	false
Size:	13704
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-errorhandling-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-errorhandling-l1-1-0.dll.1.dr
ID:	dr_121
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.084005591272777
Encrypted:	false
Size:	13704
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-file-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-file-l1-1-0.dll.1.dr
ID:	dr_134
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.920185127704799
Encrypted:	false
Size:	17288
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-file-l2-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-file-l2-1-0.dll.1.dr
ID:	dr_135
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.144814531639171
Encrypted:	false
Size:	13704
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-handle-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-handle-l1-1-0.dll.1.dr
ID:	dr_128
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.05793296645965
Encrypted:	false
Size:	13704
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-heap-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-heap-l1-1-0.dll.1.dr
ID:	dr_104
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.006562213852861
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-localization-l1-2-0.dll
Category:	dropped
Dump:	api-ms-win-core-localization-l1-2-0.dll.1.dr
ID:	dr_65
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.033672898616953
Encrypted:	false
Size:	16264
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-memory-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-memory-l1-1-0.dll.1.dr
ID:	dr_103
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.0412413614833085
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-namedpipe-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-namedpipe-l1-1-0.dll.1.dr
ID:	dr_119
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.139193948306195
Encrypted:	false
Size:	13704
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-processenvironment-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-processenvironment-l1-1-0.dll.1.dr
ID:	dr_53
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.0090501957095785
Encrypted:	false
Size:	14728
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-processthreads-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-processthreads-l1-1-0.dll.1.dr
ID:	dr_82
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.038279882249847
Encrypted:	false
Size:	15752
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-rtlsupport-l1-1-0.dll.1.dr
ID:	dr_63
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.018534150649736
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-synch-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-synch-l1-1-0.dll.1.dr
ID:	dr_9
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.965712042290703
Encrypted:	false
Size:	15752
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-sysinfo-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-sysinfo-l1-1-0.dll.1.dr
ID:	dr_40
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.0113915589466345
Encrypted:	false
Size:	14728
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-timezone-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-timezone-l1-1-0.dll.1.dr
ID:	dr_3
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.1031406198717875
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-core-util-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-core-util-l1-1-0.dll.1.dr
ID:	dr_62
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.042465348067801
Encrypted:	false
Size:	13704
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-conio-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-conio-l1-1-0.dll.1.dr
ID:	dr_73
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.040492901174502
Encrypted:	false
Size:	14728
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-convert-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-convert-l1-1-0.dll.1.dr
ID:	dr_131
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.815127400225561
Encrypted:	false
Size:	17800
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-environment-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-environment-l1-1-0.dll.1.dr
ID:	dr_107
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.015354354910336
Encrypted:	false
Size:	14216
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-filesystem-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-filesystem-l1-1-0.dll.1.dr
ID:	dr_14
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.027400722795912
Encrypted:	false
Size:	15752
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-locale-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-locale-l1-1-0.dll.1.dr
ID:	dr_75
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.097543293005385
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-math-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-math-l1-1-0.dll.1.dr
ID:	dr_87
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.547075708133648
Encrypted:	false
Size:	22920
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-multibyte-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-multibyte-l1-1-0.dll.1.dr
ID:	dr_59
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.5444447055208625
Encrypted:	false
Size:	21896
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-private-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-private-l1-1-0.dll.1.dr
ID:	dr_95
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	5.6978358275776495
Encrypted:	false
Size:	66440
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-process-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-process-l1-1-0.dll.1.dr
ID:	dr_130
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.00410331449316
Encrypted:	false
Size:	14728
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-stdio-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-stdio-l1-1-0.dll.1.dr
ID:	dr_10
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.748378545574922
Encrypted:	false
Size:	19848
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-string-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-string-l1-1-0.dll.1.dr
ID:	dr_93
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.737004736917312
Encrypted:	false
Size:	19848
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\api-ms-win-crt-utility-l1-1-0.dll
Category:	dropped
Dump:	api-ms-win-crt-utility-l1-1-0.dll.1.dr
ID:	dr_30
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	7.087346202946236
Encrypted:	false
Size:	14216
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\awt.dll
Category:	dropped
Dump:	awt.dll.1.dr
ID:	dr_76
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.4316486329296065
Encrypted:	false
Size:	1426312
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\client\jvm.dll
Category:	dropped
Dump:	jvm.dll0.1.dr
ID:	dr_123
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.482215708105056
Encrypted:	false
Size:	7126408
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\fontmanager.dll
Category:	dropped
Dump:	fontmanager.dll.1.dr
ID:	dr_26
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.613844053591821
Encrypted:	false
Size:	907656
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\instrument.dll
Category:	dropped
Dump:	instrument.dll.1.dr
ID:	dr_39
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.541815068303027
Encrypted:	false
Size:	51080
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\j2pkcs11.dll
Category:	dropped
Dump:	j2pkcs11.dll.1.dr
ID:	dr_24
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.321371819858782
Encrypted:	false
Size:	78728
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jaas.dll
Category:	dropped
Dump:	jaas.dll.1.dr
ID:	dr_37
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.430546782746639
Encrypted:	false
Size:	28552
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jabswitch.exe
Category:	dropped
Dump:	jabswitch.exe.1.dr
ID:	dr_81
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.007263993693993
Encrypted:	false
Size:	45448
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jaccessinspector.exe
Category:	dropped
Dump:	jaccessinspector.exe.1.dr
ID:	dr_120
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy:	6.044373920123989
Encrypted:	false
Size:	106888
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jaotc.exe
Category:	dropped
Dump:	jaotc.exe.1.dr
ID:	dr_115
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.548232030798964
Encrypted:	false
Size:	25480
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\java.dll
Category:	dropped
Dump:	java.dll.1.dr
ID:	dr_33
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.478639030549692
Encrypted:	false
Size:	157064
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\java.exe
Category:	modified
Dump:	java.exe.1.dr
ID:	dr_99
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.54665047165659
Encrypted:	false
Size:	50056
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\javajpeg.dll
Category:	dropped
Dump:	javajpeg.dll.1.dr
ID:	dr_2
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.504838318851567
Encrypted:	false
Size:	179080
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jdwp.dll
Category:	dropped
Dump:	jdwp.dll.1.dr
ID:	dr_7
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.424636770105568
Encrypted:	false
Size:	221576
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jfr.exe
Category:	dropped
Dump:	jfr.exe.1.dr
ID:	dr_70
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.490401002767614
Encrypted:	false
Size:	23944
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jimage.dll
Category:	dropped
Dump:	jimage.dll.1.dr
ID:	dr_92
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.4831799307348446
Encrypted:	false
Size:	33160
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jjs.exe
Category:	dropped
Dump:	jjs.exe.1.dr
ID:	dr_79
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.504576535280307
Encrypted:	false
Size:	23944
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jli.dll
Category:	dropped
Dump:	jli.dll.1.dr
ID:	dr_31
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.79235178475598
Encrypted:	false
Size:	89480
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jrunscript.exe
Category:	dropped
Dump:	jrunscript.exe.1.dr
ID:	dr_58
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.5020580633686444
Encrypted:	false
Size:	23944
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\jsound.dll
Category:	dropped
Dump:	jsound.dll.1.dr
ID:	dr_48
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.543032239407645
Encrypted:	false
Size:	61832
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\keytool.exe
Category:	dropped
Dump:	keytool.exe.1.dr
ID:	dr_113
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.493719242654426
Encrypted:	false
Size:	23944
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\kinit.exe
Category:	dropped
Dump:	kinit.exe.1.dr
ID:	dr_127
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.4962205790528795
Encrypted:	false
Size:	23944
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\klist.exe
Category:	dropped
Dump:	klist.exe.1.dr
ID:	dr_50
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.496336462274406
Encrypted:	false
Size:	23944
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\ktab.exe
Category:	dropped
Dump:	ktab.exe.1.dr
ID:	dr_41
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.494635699704767
Encrypted:	false
Size:	23944
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\lcms.dll
Category:	dropped
Dump:	lcms.dll.1.dr
ID:	dr_94
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.410642150728666
Encrypted:	false
Size:	265608
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\le.dll
Category:	dropped
Dump:	le.dll.1.dr
ID:	dr_42
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.362633826239311
Encrypted:	false
Size:	35720
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\management.dll
Category:	dropped
Dump:	management.dll.1.dr
ID:	dr_68
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.497267212917316
Encrypted:	false
Size:	29064
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\management_agent.dll
Category:	dropped
Dump:	management_agent.dll.1.dr
ID:	dr_69
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.443127891719799
Encrypted:	false
Size:	24456
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\management_ext.dll
Category:	dropped
Dump:	management_ext.dll.1.dr
ID:	dr_89
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.488447418333027
Encrypted:	false
Size:	36232
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\mlib_image.dll
Category:	dropped
Dump:	mlib_image.dll.1.dr
ID:	dr_117
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.573157741694587
Encrypted:	false
Size:	510344
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\msvcp140.dll
Category:	dropped
Dump:	msvcp140.dll.1.dr
ID:	dr_38
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.499481873564085
Encrypted:	false
Size:	567176
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\nio.dll
Category:	dropped
Dump:	nio.dll.1.dr
ID:	dr_57
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.401421873585904
Encrypted:	false
Size:	66952
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\prefs.dll
Category:	dropped
Dump:	prefs.dll.1.dr
ID:	dr_67
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.393166071780133
Encrypted:	false
Size:	25992
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\rmi.dll
Category:	dropped
Dump:	rmi.dll.1.dr
ID:	dr_54
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.410284207472968
Encrypted:	false
Size:	21384
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\server\jvm.dll
Category:	dropped
Dump:	jvm.dll.1.dr
ID:	dr_109
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.380507279954281
Encrypted:	false
Size:	12036488
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\splashscreen.dll
Category:	dropped
Dump:	splashscreen.dll.1.dr
ID:	dr_124
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.720435398912365
Encrypted:	false
Size:	220552
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\sspi_bridge.dll
Category:	dropped
Dump:	sspi_bridge.dll.1.dr
ID:	dr_1
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.395722074864556
Encrypted:	false
Size:	44424
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\sunec.dll
Category:	dropped
Dump:	sunec.dll.1.dr
ID:	dr_111
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.21643802092086
Encrypted:	false
Size:	151944
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\sunmscapi.dll
Category:	dropped
Dump:	sunmscapi.dll.1.dr
ID:	dr_46
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.338930806105191
Encrypted:	false
Size:	47496
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\unpack.dll
Category:	dropped
Dump:	unpack.dll.1.dr
ID:	dr_72
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.33486449434651
Encrypted:	false
Size:	88456
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\unpack200.exe
Category:	dropped
Dump:	unpack200.exe.1.dr
ID:	dr_101
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (console) x86-64, for MS Windows
Entropy:	6.594747511356487
Encrypted:	false
Size:	142728
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\vcruntime140.dll
Category:	dropped
Dump:	vcruntime140.dll.1.dr
ID:	dr_19
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.478053806176912
Encrypted:	false
Size:	98696
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\vcruntime140_1.dll
Category:	dropped
Dump:	vcruntime140_1.dll.1.dr
ID:	dr_29
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Entropy:	6.446332267513213
Encrypted:	false
Size:	38792
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\verify.dll
Category:	dropped
Dump:	verify.dll.1.dr
ID:	dr_125
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.523530694635441
Encrypted:	false
Size:	56712
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\w2k_lsa_auth.dll
Category:	dropped
Dump:	w2k_lsa_auth.dll.1.dr
ID:	dr_122
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.500871511809135
Encrypted:	false
Size:	31624
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\windowsaccessbridge-64.dll
Category:	dropped
Dump:	windowsaccessbridge-64.dll.1.dr
ID:	dr_21
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.4553783022872375
Encrypted:	false
Size:	212360
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\bin\zip.dll
Category:	dropped
Dump:	zip.dll.1.dr
ID:	dr_4
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy:	6.788137665174951
Encrypted:	false
Size:	89480
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Drops PE files	Persistence and Installation Behavior
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\logging.properties
Category:	dropped
Dump:	logging.properties.1.dr
ID:	dr_91
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.534020116400771
Encrypted:	false
Size:	2731
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\management\jmxremote.access
Category:	dropped
Dump:	jmxremote.access.1.dr
ID:	dr_88
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.420287335425547
Encrypted:	false
Size:	3997
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\management\management.properties
Category:	dropped
Dump:	management.properties.1.dr
ID:	dr_126
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.555097635285101
Encrypted:	false
Size:	14292
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\net.properties
Category:	dropped
Dump:	net.properties.1.dr
ID:	dr_85
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.784352961469393
Encrypted:	false
Size:	6373
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\java.policy
Category:	dropped
Dump:	java.policy.1.dr
ID:	dr_97
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.430165781494963
Encrypted:	false
Size:	2293
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\java.security
Category:	dropped
Dump:	java.security.1.dr
ID:	dr_98
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	4.943820945789176
Encrypted:	false
Size:	59892
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\policy\README.txt
Category:	dropped
Dump:	README.txt.1.dr
ID:	dr_6
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.7611843972228405
Encrypted:	false
Size:	2390
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading
Creates license or readme file	Compliance, Persistence and Installation Behavior

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\policy\limited\default_US_export.policy
Category:	dropped
Dump:	default_US_export.policy.1.dr
ID:	dr_100
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.527560331114326
Encrypted:	false
Size:	146
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\policy\limited\default_local.policy
Category:	dropped
Dump:	default_local.policy.1.dr
ID:	dr_77
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.651231515753206
Encrypted:	false
Size:	647
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\policy\limited\exempt_local.policy
Category:	dropped
Dump:	exempt_local.policy.1.dr
ID:	dr_118
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.521178196551511
Encrypted:	false
Size:	566
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\security\policy\unlimited\default_local.policy
Category:	dropped
Dump:	default_local.policy0.1.dr
ID:	dr_129
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.403143222843641
Encrypted:	false
Size:	193
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\conf\sound.properties
Category:	dropped
Dump:	sound.properties.1.dr
ID:	dr_110
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.681309933800066
Encrypted:	false
Size:	1210
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\ADDITIONAL_LICENSE_INFO
Category:	dropped
Dump:	ADDITIONAL_LICENSE_INFO.1.dr
ID:	dr_90
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.530565844905079
Encrypted:	false
Size:	2114
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\ASSEMBLY_EXCEPTION
Category:	dropped
Dump:	ASSEMBLY_EXCEPTION.1.dr
ID:	dr_27
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.747042537008044
Encrypted:	false
Size:	1522
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\LICENSE
Category:	dropped
Dump:	LICENSE.1.dr
ID:	dr_23
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.667864876938965
Encrypted:	false
Size:	19274
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\asm.md
Category:	dropped
Dump:	asm.md.1.dr
ID:	dr_80
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.197382062974255
Encrypted:	false
Size:	1582
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\c-libutl.md
Category:	dropped
Dump:	c-libutl.md.1.dr
ID:	dr_22
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.222803386080423
Encrypted:	false
Size:	1556
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\cldr.md
Category:	dropped
Dump:	cldr.md0.1.dr
ID:	dr_44
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.237792588331056
Encrypted:	false
Size:	2926
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\icu.md
Category:	dropped
Dump:	icu.md.1.dr
ID:	dr_102
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.2474229778556385
Encrypted:	false
Size:	2930
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\public_suffix.md
Category:	dropped
Dump:	public_suffix.md.1.dr
ID:	dr_96
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.594325702397589
Encrypted:	false
Size:	17785
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.base\unicode.md
Category:	dropped
Dump:	unicode.md.1.dr
ID:	dr_64
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.231379039238385
Encrypted:	false
Size:	2957
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\freetype.md
Category:	dropped
Dump:	freetype.md.1.dr
ID:	dr_51
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	4.806333868279203
Encrypted:	false
Size:	30422
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\giflib.md
Category:	dropped
Dump:	giflib.md.1.dr
ID:	dr_32
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.243726093802808
Encrypted:	false
Size:	1288
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\jpeg.md
Category:	dropped
Dump:	jpeg.md.1.dr
ID:	dr_56
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.656456480160931
Encrypted:	false
Size:	3997
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\lcms.md
Category:	dropped
Dump:	lcms.md.1.dr
ID:	dr_61
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.23012419800887
Encrypted:	false
Size:	2630
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\libpng.md
Category:	dropped
Dump:	libpng.md.1.dr
ID:	dr_36
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.869619393500101
Encrypted:	false
Size:	6980
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.desktop\mesa3d.md
Category:	dropped
Dump:	mesa3d.md.1.dr
ID:	dr_66
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.1453426112774965
Encrypted:	false
Size:	5732
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.xml.crypto\santuario.md
Category:	dropped
Dump:	santuario.md.1.dr
ID:	dr_0
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.576057024985053
Encrypted:	false
Size:	11499
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.xml\bcel.md
Category:	dropped
Dump:	bcel.md.1.dr
ID:	dr_11
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.5605766632904565
Encrypted:	false
Size:	11195
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.xml\dom.md
Category:	dropped
Dump:	dom.md.1.dr
ID:	dr_60
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 text
Entropy:	5.033869042271464
Encrypted:	false
Size:	3761
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\java.xml\xerces.md
Category:	dropped
Dump:	xerces.md.1.dr
ID:	dr_49
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.611377085862739
Encrypted:	false
Size:	11852
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\jdk.crypto.cryptoki\LICENSE
Category:	dropped
Dump:	LICENSE0.1.dr
ID:	dr_35
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	3.9801694078807643
Encrypted:	false
Size:	33
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\jdk.crypto.cryptoki\pkcs11wrapper.md
Category:	dropped
Dump:	pkcs11wrapper.md.1.dr
ID:	dr_132
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.173293353802325
Encrypted:	false
Size:	2131
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\jdk.crypto.ec\ecc.md
Category:	dropped
Dump:	ecc.md.1.dr
ID:	dr_116
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.637645849321541
Encrypted:	false
Size:	29220
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\jdk.internal.vm.compiler\ASSEMBLY_EXCEPTION
Category:	dropped
Dump:	ASSEMBLY_EXCEPTION0.1.dr
ID:	dr_84
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	4.507742914525315
Encrypted:	false
Size:	44
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\legal\jdk.localedata\cldr.md
Category:	dropped
Dump:	cldr.md.1.dr
ID:	dr_8
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	3.8212266049160206
Encrypted:	false
Size:	33
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\classlist
Category:	dropped
Dump:	classlist.1.dr
ID:	dr_112
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	4.811817409072215
Encrypted:	false
Size:	40760
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\fontconfig.bfc
Category:	dropped
Dump:	fontconfig.bfc.1.dr
ID:	dr_47
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	raw G3 (Group 3) FAX
Entropy:	4.437305910502734
Encrypted:	false
Size:	4630
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\fontconfig.properties.src
Category:	dropped
Dump:	fontconfig.properties.src.1.dr
ID:	dr_71
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.208754321730197
Encrypted:	false
Size:	12345
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\jawt.lib
Category:	dropped
Dump:	jawt.lib.1.dr
ID:	dr_133
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	current ar archive
Entropy:	4.45378313671499
Encrypted:	false
Size:	1682
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\jfr\default.jfc
Category:	dropped
Dump:	default.jfc.1.dr
ID:	dr_25
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	XML 1.0 document, ASCII text
Entropy:	4.596350178406456
Encrypted:	false
Size:	30757
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\jrt-fs.jar
Category:	dropped
Dump:	jrt-fs.jar.1.dr
ID:	dr_34
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Java archive data (JAR)
Entropy:	7.925130683084167
Encrypted:	false
Size:	106684
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\jvm.cfg
Category:	dropped
Dump:	jvm.cfg.1.dr
ID:	dr_43
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	3.8518232255517657
Encrypted:	false
Size:	28
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\jvm.lib
Category:	dropped
Dump:	jvm.lib.1.dr
ID:	dr_86
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	current ar archive
Entropy:	5.463978779966954
Encrypted:	false
Size:	1022614
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\modules
Category:	dropped
Dump:	modules.1.dr
ID:	dr_106
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Java module image (little endian), version 1.0
Entropy:	6.426208547472535
Encrypted:	false
Size:	94482234
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\psfont.properties.ja
Category:	dropped
Dump:	psfont.properties.ja.1.dr
ID:	dr_108
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.260880283220047
Encrypted:	false
Size:	3793
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\psfontj2d.properties
Category:	dropped
Dump:	psfontj2d.properties.1.dr
ID:	dr_114
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	5.012862319190609
Encrypted:	false
Size:	11390
Whitelisted:	false

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\security\blocked.certs
Category:	dropped
Dump:	blocked.certs.1.dr
ID:	dr_5
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	4.141598882390435
Encrypted:	false
Size:	2527
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\security\cacerts
Category:	dropped
Dump:	cacerts.1.dr
ID:	dr_83
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Java KeyStore
Entropy:	7.644137606111854
Encrypted:	false
Size:	170880
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\security\default.policy
Category:	dropped
Dump:	default.policy.1.dr
ID:	dr_74
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text
Entropy:	4.695582296233407
Encrypted:	false
Size:	10534
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\security\public_suffix_list.dat
Category:	dropped
Dump:	public_suffix_list.dat.1.dr
ID:	dr_20
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Entropy:	5.201580912843236
Encrypted:	false
Size:	230480
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\lib\tzmappings
Category:	dropped
Dump:	tzmappings.1.dr
ID:	dr_28
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with CRLF line terminators
Entropy:	4.975233941413236
Encrypted:	false
Size:	21963
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Program Files\Eclipse Adoptium\jre-11.0.23.9-hotspot\release
Category:	dropped
Dump:	release.1.dr
ID:	dr_45
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	ASCII text, with very long lines (1077), with CRLF, LF line terminators
Entropy:	5.3569186194932
Encrypted:	false
Size:	1671
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates a directory in C:\Program Files	Compliance, System Summary	Masquerading

Details

File:	C:\Windows\Installer\4fd551.msi
Category:	dropped
Dump:	4fd551.msi.1.dr
ID:	dr_12
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Eclipse Temurin Runtime Environment with Hotspot, Author: Eclipse Adoptium, Keywords: Installer, Comments: This installer database contains the logic and data required to install Eclipse Temurin JRE with Hotspot 11.0.23+9 (x64)., Revision Number: {C8CB6536-7163-45EE-B31E-E422CCE99350}, Create Time/Date: Wed Apr 17 22:27:18 2024, Last Saved Time/Date: Wed Apr 17 22:27:18 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.0.3910), Security: 2, Template: x64;1033,1031,3082,1036,1041,2052,1028
Entropy:	7.991587754590891
Encrypted:	true
Size:	31502336
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\MSID919.tmp
Category:	dropped
Dump:	MSID919.tmp.1.dr
ID:	dr_15
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy:	6.645828209015796
Encrypted:	false
Size:	221104
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Deletes files inside the Windows folder	System Summary	File Deletion
Drops PE files	Persistence and Installation Behavior
Drops PE files to the windows directory (C:\Windows)	Persistence and Installation Behavior	Masquerading
Found dropped PE file which has not been started or loaded	Malware Analysis System Evasion

Details

File:	C:\Windows\Installer\MSIDA63.tmp
Category:	dropped
Dump:	MSIDA63.tmp.1.dr
ID:	dr_16
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	6.483577531322225
Encrypted:	false
Size:	348372
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\SourceHash{33697998-3DD6-4724-A09F-1B685CA828AB}
Category:	dropped
Dump:	SourceHash{33697998-3DD6-4724-A09F-1B685CA828AB}.1.dr
ID:	dr_139
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.1914721099966412
Encrypted:	false
Size:	20480
Whitelisted:	false

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading

Details

File:	C:\Windows\Installer\{33697998-3DD6-4724-A09F-1B685CA828AB}\logo.ico
Category:	dropped
Dump:	logo.ico.1.dr
ID:	dr_136
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Entropy:	6.011630703226823
Encrypted:	false
Size:	182536
Whitelisted:	false

Details

File:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
Category:	dropped
Dump:	ngen.log.1.dr
ID:	dr_13
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Entropy:	5.359647024957233
Encrypted:	false
Size:	403156
Whitelisted:	false

Details

File:	C:\Windows\Temp\~DF1F88AC62D71B17BA.TMP
Category:	dropped
Dump:	~DF1F88AC62D71B17BA.TMP.1.dr
ID:	dr_140
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.16869341449605804
Encrypted:	false
Size:	69632
Whitelisted:	false

Details

File:	C:\Windows\Temp\~DF20A76FB830944DBB.TMP
Category:	dropped
Dump:	~DF20A76FB830944DBB.TMP.1.dr
ID:	dr_17
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.2978258668013307
Encrypted:	false
Size:	32768
Whitelisted:	false

Details

File:	C:\Windows\Temp\~DF6C8996958D141E26.TMP
Category:	dropped
Dump:	~DF6C8996958D141E26.TMP.1.dr
ID:	dr_138
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.08582365359885288
Encrypted:	false
Size:	32768
Whitelisted:	false

Details

File:	C:\Windows\Temp\~DF80DFA9CF509D0074.TMP
Category:	dropped
Dump:	~DF80DFA9CF509D0074.TMP.1.dr
ID:	dr_105
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	Composite Document File V2 Document, Cannot read section info
Entropy:	1.6284917136042845
Encrypted:	false
Size:	20480
Whitelisted:	false

Details

File:	C:\Windows\Temp\~DFA201DAA8B32947EE.TMP
Category:	dropped
Dump:	~DFA201DAA8B32947EE.TMP.1.dr
ID:	dr_18
Target ID:	1
Process:	C:\Windows\System32\msiexec.exe
Type:	data
Entropy:	0.0
Encrypted:	false
Size:	512
Whitelisted:	false

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
OpenJDK11U-jre_x64_windows_hotspot_11.0.23_9.msi

Files

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC ReportOpenJDK11U-jre_x64_windows_hotspot_11.0.23_9.msi

Files

IOC Report
OpenJDK11U-jre_x64_windows_hotspot_11.0.23_9.msi