Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
441s -
max time network
1176s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/02/2024, 17:59
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft PID Checker/Microsoft PID Checker.exe
Resource
win10-20240214-en
Behavioral task
behavioral2
Sample
Microsoft PID Checker/Microsoft PID Checker.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Microsoft PID Checker/ProductKeyUtilities.dll
Resource
win10-20240214-en
Behavioral task
behavioral4
Sample
Microsoft PID Checker/ProductKeyUtilities.dll
Resource
win10v2004-20231215-en
General
-
Target
Microsoft PID Checker/Microsoft PID Checker.exe
-
Size
10.6MB
-
MD5
2c544f4b1a38f88bb994f0dfa8086806
-
SHA1
f3fff5624015ce70c0f2e0dc170be94b52ab72f3
-
SHA256
d62a5168dee0927fe69d84d2b3521871be2881dc645d7ea10b485e503316ea73
-
SHA512
71ccb63c0e8d3f17335be0d78544448cfd951a641e4f899386437a6af49dede9d1bd2a319a1303c2516768f60683c6af67e52d3237de31b3b06ac9d476a03a78
-
SSDEEP
24576:DgqSboEPwUX4st0WUhMfu2S8RwD4+6QpI2grJ/TAegXuvQSiker0q48Fli/ajLs3:DgqqwJr0D1wXS2g1LZJHnIndasG
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Microsoft PID Checker.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier Microsoft PID Checker.exe