Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
46s -
max time network
48s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
25/03/2024, 16:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hdlscom3.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
hdlscom3.exe
-
Size
8.6MB
-
MD5
2caa816bbdfa51702b67a76a8605ef82
-
SHA1
bcd5c84f2f2cd2c814d2ba71fa1e4c84a184ae80
-
SHA256
dfc2cc6b0ac09b5837a495ce2f4bf6a392c2514aacba67360e4b90adc943dd25
-
SHA512
8040373dda14180203639c9cf880a0cfd4fe9b887147c10c2abe5965ae2451e689bf94bb963928e8ee550908ee55e7e78e040fee2b502afba87f26b660cd8140
-
SSDEEP
196608:OY0Ap+wQuLgtV0Sd6OdJ5KxRCYjZRqCkSIqKYODNQfAVeb:OY7+PndhsxdiCkSsvNQfAV2
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 29 IoCs
pid Process 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe 1344 hdlscom3.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1344 hdlscom3.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1344 hdlscom3.exe 1344 hdlscom3.exe