Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

Device/Har...ea.exe

windows7-x64

3

Device/Har...ea.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    101s
  • max time network
    107s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/02/2023, 08:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Device/HarddiskVolume3/Users/GemaPerezLGC/AppData/Roaming/0install.net/desktop-integration/stubs/1ea.exe

  • Size

    111KB

  • MD5

    999c037cac314f87a66c7833311c6049

  • SHA1

    e4b2a3b9fe782d91ef259ef7b5f0bfeda5e7f34e

  • SHA256

    1fa13a1b988d9d49a9a02daef6ef039e359bdc78b41a30aada5773eaf4465c2d

  • SHA512

    dfbaf006fee7b34e8b43a8cb4f433f9df3dff93af6ebd902452b257c2529a9dea42f87cecc9142f6f1c92455b0cc0fc9245d9a1252d3e9e2e276ad3a1fda0432

  • SSDEEP

    384:Fyd6V4TJZVhmuts+b92XSLJQEfnyWkTNKRwMF5cVKPwNU/a+:Fy0KjJsU6QJQEfnyWkWwMFIkfS+

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\GemaPerezLGC\AppData\Roaming\0install.net\desktop-integration\stubs\1ea.exe
    "C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\GemaPerezLGC\AppData\Roaming\0install.net\desktop-integration\stubs\1ea.exe"
    1⤵
      PID:4352
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4352 -s 708
        2⤵
        • Program crash
        PID:1412
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 428 -p 4352 -ip 4352
      1⤵
        PID:1852

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4352-132-0x00000000009D0000-0x00000000009F2000-memory.dmp

        Filesize

        136KB

        Download

      • memory/4352-133-0x00007FFC1E1A0000-0x00007FFC1EC61000-memory.dmp

        Filesize

        10.8MB

        Download

      • memory/4352-134-0x00007FFC1E1A0000-0x00007FFC1EC61000-memory.dmp

        Filesize

        10.8MB

        Download

      • memory/4352-135-0x00007FFC1E1A0000-0x00007FFC1EC61000-memory.dmp

        Filesize

        10.8MB

        Download