Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
27/03/2024, 12:14
General
-
Target
$EXEDIR/CCleaner Professional/CCleaner64.exe
-
Size
6.0MB
-
MD5
debad230966fdfbf8f8bd62d99a17865
-
SHA1
ab648a9b7254958d2a957959f3bb0378cd7f26ba
-
SHA256
5bf887d4e78afba3cbeb7e7815d52793f78cdb1df396eb8ac972539ced98c6a4
-
SHA512
bbe3cfbd6209d4c3d646d838eb8d46da5531e453eb64a594902a7ea822347550982276e302e087ffaed2f2e6209c7813b2eab5135e21f7108a2c993d0a83f2c0
-
SSDEEP
98304:4GYV/Ly+S19+NvTNIj/6QwG3RcUmfX/ZdQEuMTz29fA4rb:IQ+S19+NvTNIj/6QwG3RcUmfX/ZdQEuf
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Professional\CCleaner64.exe"C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Professional\CCleaner64.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\pcaui.exe"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {22bfeed6-cb41-4fe3-9e7b-fab443ef9e19} -a "CCleaner" -v "Piriform Ltd" -s "This app can't run because it causes security or performance issues on Windows. A new version may be available. Check with your software provider for an updated version that runs on this version of Windows." -n 2 -f 2021048 -k 0 -e "C:\Users\Admin\AppData\Local\Temp\$EXEDIR\CCleaner Professional\CCleaner64.exe"2⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1432 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:81⤵