Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

01/02/2024, 14:48 UTC

240201-r6nk8ahgfq 8

01/02/2024, 14:46 UTC

240201-r5rlgshgdr 3

General

  • Target

    parsec-windows.exe

  • Size

    3.3MB

  • MD5

    6fb8ea7b3686d1f7ecd7d36da6a9bed1

  • SHA1

    024855f92c23dc0402ba77ef58a23aa504824753

  • SHA256

    40b804976a1a7286926f9af215ba9494b4cc6e8eb5ffa755b6b72d2cf2d7d342

  • SHA512

    bd25df322db2bd950edc5d151ff923251858ac4670b332b76a5d0cea52a6243a9173e4567535af221e172a1a097f5733799c04a27bedf938e4247a3714adc706

  • SSDEEP

    49152:ChmMFV+KGAFwXidaX/DEEj7CVytNrDpusE+AwhzlhzUJy1AIEbPnwC:CIMFMKXiSdab5j+VyWRwhzrzuIWw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • parsec-windows.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    9b38d46d6882ee63437c721734be794c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • parsecd.exe
    .exe windows:6 windows x64 arch:x64

    43e208612bb1b7bf9a2d6ef93d7ffeec


    Code Sign

    Headers

    Imports

    Sections

  • pservice.exe
    .exe windows:6 windows x64 arch:x64

    60e699a86ace77c1e6146e859c5513ec


    Code Sign

    Headers

    Imports

    Sections

  • setup.json
  • skel/appdata.json
  • skel/parsecd-150-91a.dll
    .dll windows:6 windows x64 arch:x64

    ceab3940129d05e4da76be706267002d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • teams.exe
    .exe windows:6 windows x64 arch:x64

    ca031310eb12b349b9b999ebbe0436d0


    Code Sign

    Headers

    Imports

    Sections

  • vdd/devcon.exe
    .exe windows:10 windows x64 arch:x64

    68d7a4b13b38a420769678c927abc196


    Headers

    Imports

    Sections

  • vdd/mm.cat
  • vdd/mm.dll
    .dll windows:10 windows x64 arch:x64

    961914856f133f1f3078d8395b47963c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vdd/mm.inf
  • vusb/parsec-vud.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • nefconc.exe
    .exe windows:6 windows x64 arch:x64

    dc815f97913fd406254f26cfd8b6c644


    Code Sign

    Headers

    Imports

    Sections

  • parsecudeaudio/parsecudeaudio.cat
  • parsecudeaudio/parsecudeaudio.inf
  • parsecudeaudio/parsecudeaudio.sys
    .sys windows:10 windows x64 arch:x64

    d0594eb75f6f68f522b582afb130369a


    Code Sign

    Headers

    Imports

    Sections

  • pcvudhc/parsecvusba.cat
  • pcvudhc/parsecvusba.inf
  • pcvudhc/parsecvusba.sys
    .sys windows:10 windows x64 arch:x64

    a045be2069c04d8ac7105b729900a930


    Code Sign

    Headers

    Imports

    Sections

  • vusbinstall.bat
  • vusbuninstall.bat
  • wscripts/firewall-add.vbs
    .vbs
  • wscripts/firewall-remove.vbs
    .vbs
  • wscripts/legacy-cleanup.vbs
    .vbs
  • wscripts/service-install.vbs
    .vbs
  • wscripts/service-kill-parsec.vbs
    .vbs
  • wscripts/service-remove.vbs
    .vbs
  • wscripts/vdd-install.vbs
    .vbs
  • wscripts/vdd-remove.vbs
    .vbs

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.