Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
159s -
max time network
334s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23/11/2022, 20:03
Static task
static1
Behavioral task
behavioral1
Sample
.
Resource
win10v2004-20221111-en
0 signatures
150 seconds
Errors
Reason
platform exec: Failed to rename payload to C:\Users\Admin\AppData\Local\Temp -> rename payload.dat C:\Users\Admin\AppData\Local\Temp: Access is denied.
388/Software\Classes\.dat/: The system cannot find the file specified.
376/Software\Microsoft\Windows\CurrentVersion\App Paths\/: The system cannot find the file specified.
image=C:\Windows\system32\cmd.exe
command=cmd /c payload.dat
wdir=payload.dat
Payload error: The directory name is invalid.
General
-
Target
.
-
Size
601B
-
MD5
27d0754851c2d9eaf6ddb078ef307457
-
SHA1
c9a40dc581b20b2a967b898d0a3211dcd99bbb52
-
SHA256
c79736b882f5774447fc62e43673b6c8b99364fb6e49edef08620ee9aa380f4a
-
SHA512
34c93ade1beebc35d2fd78bcd7a9d786a3b074bc17ad662a5294603ae1fb72e66103b9719c505dd2d92f7cf15765b961b184f5650d116b308d5f98de89e6e13f
Score
1/10
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb0a4f46f8,0x7ffb0a4f4708,0x7ffb0a4f47181⤵PID:3540