Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

check.bat

windows7-x64

8

check.bat

windows10-2004-x64

8

install.bat

windows7-x64

8

install.bat

windows10-2004-x64

8

xmlprov.dll

windows7-x64

3

xmlprov.dll

windows10-2004-x64

3

xwtpui.dll

windows7-x64

1

xwtpui.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/06/2023, 11:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xmlprov.dll

  • Size

    2.6MB

  • MD5

    b693e3d2f2cab550ad4f8c5722776498

  • SHA1

    6dc93db10d46cf777f9928803157dd16dc097e79

  • SHA256

    f702dfddbc5b4f1d5a5a9db0a2c013900d30515e69a09420a7c3f6eaac901b12

  • SHA512

    d5c02150265ab6d5d2d6a6e39514b345f6108afaecfd0d8e196b0b99d6d1af36245eb12e8a6879f16b619ba89f8eec442c394eff5f6298d1534c9f0084d63f18

  • SSDEEP

    49152:xL+qLntVtOg3gJjW4UeJiGew5o/ylRbUlo60bNBUDXVFhIECIpuXo+kY8ss:tHnsg3gZHUeANwl6SuF+SFss

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\xmlprov.dll,#1
    1⤵
      PID:4148
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4148 -s 356
        2⤵
        • Program crash
        PID:4872
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 424 -p 4148 -ip 4148
      1⤵
        PID:3076

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads