Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PlayniteInstaller.exe
-
Size
248KB
-
Sample
230525-zhvzdscc85
-
MD5
216721738f08fbd3b233e07619950619
-
SHA1
08c9849bfc78aa4f8f358cbf2301598fdb48620f
-
SHA256
2b2ff0f08c60f44ce321573ce0f00a44e336538775735a8f5d6644a12b46124f
-
SHA512
24d6f3e6cd9b823169cdcce8977f03b38a7b9579ff8c65257570de9aeb440cf966fc2c571d9de363d10eead47a49c58bf4d55f9ae2860a0fea76cc84e77426cf
-
SSDEEP
3072:xNi5RzqbBZCKzSU/8+xFO0AtqtCi2yJir3YgECNWmkCK2yJir3YgECNWmTN8lQx1:7iDzqfoKtO0Atq6Z
Static task
static1
Behavioral task
behavioral1
Sample
PlayniteInstaller.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PlayniteInstaller.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
PlayniteInstaller.exe
-
Size
248KB
-
MD5
216721738f08fbd3b233e07619950619
-
SHA1
08c9849bfc78aa4f8f358cbf2301598fdb48620f
-
SHA256
2b2ff0f08c60f44ce321573ce0f00a44e336538775735a8f5d6644a12b46124f
-
SHA512
24d6f3e6cd9b823169cdcce8977f03b38a7b9579ff8c65257570de9aeb440cf966fc2c571d9de363d10eead47a49c58bf4d55f9ae2860a0fea76cc84e77426cf
-
SSDEEP
3072:xNi5RzqbBZCKzSU/8+xFO0AtqtCi2yJir3YgECNWmkCK2yJir3YgECNWmTN8lQx1:7iDzqfoKtO0Atq6Z
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Legitimate hosting services abused for malware hosting/C2
-