Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3hetman_par...1).exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3Hetman Par...ry.chm
windows10-2004-x64
1Hetman Par...ry.exe
windows10-2004-x64
6Resources/...nu.dll
windows10-2004-x64
1Resources/...nu.dll
windows10-2004-x64
1Resources/FileExt.dll
windows10-2004-x64
1Resources/LoadRAW.dll
windows10-2004-x64
3Resources/...DF.dll
windows10-2004-x64
3Resources/...rn.dll
windows10-2004-x64
3Resources/...mp.dll
windows10-2004-x64
1Resources/...ig.exe
windows10-2004-x64
1Resources/...0d.dll
windows10-2004-x64
3Resources/...tf.dll
windows10-2004-x64
1media_dll/SDL-2.dll
windows10-2004-x64
1media_dll/SDL.dll
windows10-2004-x64
1media_dll/...54.dll
windows10-2004-x64
3media_dll/...54.dll
windows10-2004-x64
1media_dll/...-3.dll
windows10-2004-x64
1media_dll/...54.dll
windows10-2004-x64
3media_dll/...52.dll
windows10-2004-x64
1media_dll/...-0.dll
windows10-2004-x64
3media_dll/...-2.dll
windows10-2004-x64
3Analysis
-
max time kernel
1793s -
max time network
1803s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2024, 09:34
Static task
static1
Behavioral task
behavioral1
Sample
hetman_partition_recovery (1).exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Hetman Partition Recovery.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
Hetman Partition Recovery.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Resources/DSKImageMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
Resources/DiskMenu.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Resources/FileExt.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
Resources/LoadRAW.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Resources/MagicPDF.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral10
Sample
Resources/StarBurn.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Resources/magic_cmp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
Resources/magic_jbig.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Resources/msvcr100d.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral14
Sample
Resources/wp_type1ttf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
media_dll/SDL-2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral16
Sample
media_dll/SDL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
media_dll/avcodec-54.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral18
Sample
media_dll/avdevice-54.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
media_dll/avfilter-3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
media_dll/avformat-54.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
media_dll/avutil-52.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
media_dll/swresample-0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
media_dll/swscale-2.dll
Resource
win10v2004-20240226-en
General
-
Target
Resources/magic_jbig.exe
-
Size
111KB
-
MD5
d25299383f7a403e4d5facbf2c24980f
-
SHA1
3aee28dfedf783e21ced37995d5f3e8fde5179c8
-
SHA256
fd5cf22b3c7d1229d77b59abedfd9d08cfd8f3c0cc9b5a1c4da474d974518a74
-
SHA512
baf9c08b86cecc9f3772cf1ff8f479689913b1d675719dafd7f270f9d5ec88723751907b4a114768b719b39a0f1786f60716ef37997513bb1e349dff683a5d87
-
SSDEEP
1536:vjRqb7CCq7wq1EnbaPOodfUYA40/OINeDRPtsGqh1TsENKRxoUPLMC+ZQhIDCriZ:r6oVvH6eVPpqhdGoUPLMaEP
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\Resources\magic_jbig.exe"C:\Users\Admin\AppData\Local\Temp\Resources\magic_jbig.exe"1⤵PID:332
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3912 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:81⤵PID:2732
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1032 --field-trial-handle=2248,i,10247514684337323751,15511974759131734137,262144 --variations-seed-version /prefetch:81⤵PID:4512