Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 15:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a118d8ac1e606d881f59aaa48daf97faf531ec7a6ed297b951de2e41d7a4bd92.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
a118d8ac1e606d881f59aaa48daf97faf531ec7a6ed297b951de2e41d7a4bd92.dll
-
Size
1.2MB
-
MD5
d71348ac9a0aa175094eae6c6346c3f6
-
SHA1
22353d8b60a936df5969bf4df561bd6ca4893e0b
-
SHA256
a118d8ac1e606d881f59aaa48daf97faf531ec7a6ed297b951de2e41d7a4bd92
-
SHA512
f6a2c5b0b2b445b4eb1f478a9e323bedc2422e741bac38ebecf35c698a816f5fa096f99295541f5f75346c14a7dcb62f296c242d681889df7f60755e7d0741f7
-
SSDEEP
24576:TOlLPS/snbefBkOWG18PI3NuAb669Neky+pHb52mkTm3y2djZbx1xAX+:qt1p0GcppvQgy2dtJ1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3584 2028 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a118d8ac1e606d881f59aaa48daf97faf531ec7a6ed297b951de2e41d7a4bd92.dll,#11⤵PID:2028
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2028 -s 3282⤵
- Program crash
PID:3584
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2028 -ip 20281⤵PID:1928