File Behavior
WBENSETUP_GD.MSI has been seen to perform the following behavior:
This process creates other processes on disk
The process is run as an MSI installer package
Can communicate with other computer systems using HTTP protocols
Adds products to the system registry
Adds a Registry Key (RUN) to auto start Programs on system start up
Executes a Process
This Process Deletes Other Processes From Disk
Writes to another Process's Virtual Memory (Process Hijacking)
WBENSETUP_GD.MSI has been the subject of the following behavior:
Created as a process on disk
The process is executed as part of a software installation process
Deleted as a process from disk
Executed as a Process
Country Of Origin
The filename WBENSETUP_GD.MSI was first seen on Jun 28 2008 in the following geographical region of the Prevx community:
The UNITED STATES on Jun 28 2008
File Name Aliases
WBENSETUP_GD.MSI can also use the following file names:
WBENSETUP_GD(n).MSIN5UJB7KG.MSI1YWS26AH.MSI??????.MSIWBENSETUP_GD[n].MSI?????.MSI
Filesizes
The following file size has been seen:
338,432 bytes 350,208 bytes
Vendor, Product and Version Information
These files have no vendor, product or version information specified in the file header.
File Type
The filename WBENSETUP_GD.MSI refers to many versions of an Excel file.