Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02/10/2022, 13:29 UTC
General
-
Target
558215656731cfb9b5b289ecc355087f311cc362907854fa4e30bf24e5885d58.exe
-
Size
312KB
-
MD5
6668cd8454b35daf11bd9dba69f532e0
-
SHA1
5bc997203a0cb719002f12db7cf596ab2bf774ce
-
SHA256
558215656731cfb9b5b289ecc355087f311cc362907854fa4e30bf24e5885d58
-
SHA512
031a1530bd56799d0eea3aaf4041ba22f3f009eb0bb72c884e01de9a5c8ffed141b333044e5ad67e2d5bf0c5d24021714a348c32e43503b9c114323b02dbfc83
-
SSDEEP
6144:hRhcv7xKa31tFUDjsknZRr3DWA6rCMV7hcj0gyFmbUGcAUsZg:XhcDEa37FUDjs6brzWA6uidcIgmmbUGs
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\558215656731cfb9b5b289ecc355087f311cc362907854fa4e30bf24e5885d58.exe"C:\Users\Admin\AppData\Local\Temp\558215656731cfb9b5b289ecc355087f311cc362907854fa4e30bf24e5885d58.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1972 -s 5842⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1972 -ip 19721⤵
Network
-
DNS15.89.54.20.in-addr.arpaRemote address:8.8.8.8:53Request15.89.54.20.in-addr.arpaIN PTRResponse -
DNS106.89.54.20.in-addr.arpaRemote address:8.8.8.8:53Request106.89.54.20.in-addr.arpaIN PTRResponse
-
95.101.78.106:80 -
93.184.220.29:80
-
20.44.10.122:443
-
104.110.191.133:80
-
104.110.191.133:80
-
104.110.191.133:80
-
104.80.225.205:443
-
8.8.8.8:5315.89.54.20.in-addr.arpadns
DNS Request
15.89.54.20.in-addr.arpa
-
8.8.8.8:53106.89.54.20.in-addr.arpadns
DNS Request
106.89.54.20.in-addr.arpa