Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 03:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4052d241fac3d51828e58e8b939c418465cc58e037d12e0179ef008b8e125be5.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
4052d241fac3d51828e58e8b939c418465cc58e037d12e0179ef008b8e125be5.dll
-
Size
1.2MB
-
MD5
11eaaa7f664de907db0762c1babd0362
-
SHA1
37f3a0d29f03898223a6815ee42e12c1321bd91f
-
SHA256
4052d241fac3d51828e58e8b939c418465cc58e037d12e0179ef008b8e125be5
-
SHA512
5f013f456b5299f47ab4d1ff9f9b690466c140a7a5620f718353a616d86ae4bc88f225286a9bf89a306ac525285ce4d2806fc9a43ffd5d14ac764f505bdcaff7
-
SSDEEP
24576:jrZcCgifLC5yVOlFG1/V4WDfa+xtvzRCpZ9Vw7niWOGi:eS52+NGV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2588 3224 WerFault.exe 34
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4052d241fac3d51828e58e8b939c418465cc58e037d12e0179ef008b8e125be5.dll,#11⤵PID:3224
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3224 -s 3282⤵
- Program crash
PID:2588
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 360 -p 3224 -ip 32241⤵PID:5116