Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
31s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
07/06/2023, 16:21
Static task
static1
Behavioral task
behavioral1
Sample
GameuxInstallHelper.dll
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
GameuxInstallHelper.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
GameuxInstallHelper.dll
-
Size
94KB
-
MD5
4d3ac88054df63fc810427bdaa96c458
-
SHA1
e4d554e03ba91f6b53a2a80253b339f56e303c94
-
SHA256
b07ffcd0af80f6b9fba09abe816ba2f0ff0d336639f1768fc317291bc635ece6
-
SHA512
d4732ad89bbb19b316dff1b9c534acf98bb985c89d1295f08e24b21531123426500b3712979dda2f0e941a5969c0cbca15bbd52f6c167653f96a494a6677ca54
-
SSDEEP
1536:B+cZE7LuH82vbVSEru0QrtLMNYxKoqbEnz8Gj1Nh5vIexy8Cy/3:YcE7LV2ULMZowGjJ5vIexy8Cy/3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28 PID 1208 wrote to memory of 1288 1208 rundll32.exe 28