Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
12/08/2023, 11:03 UTC
Behavioral task
behavioral1
Sample
Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Baldurs Gate 3 Early Access Plus 15 Trainer Updated 2021.10.18.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
游侠网最新单机游戏.url
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
游侠网最新单机游戏.url
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
游侠网热门MOD补丁.url
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
游侠网热门MOD补丁.url
Resource
win10v2004-20230703-en
General
-
Target
游侠网热门MOD补丁.url
-
Size
183B
-
MD5
1240cb2f6fdcd17b166496bd17f72cb6
-
SHA1
2c4e10cb34c961bd93b977f138a2b04a0fde54d0
-
SHA256
b309f388ad3192343d775f071c46d20e2c7cfff64e757c20071f164eb46be0e5
-
SHA512
3723249fb3b771aa4b2fb17d535b2aee241dcd16091c90ec55993c1821f1b29f919406ae012b8ce7bf446616acd401cd4ccedbbff254d6b90f1027364c16e690
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request158.240.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.81.21.72.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request108.211.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
73 B 147 B 1 1
DNS Request
158.240.127.40.in-addr.arpa
-
71 B 142 B 1 1
DNS Request
240.81.21.72.in-addr.arpa
-
74 B 145 B 1 1
DNS Request
108.211.229.192.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa