Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
453s -
max time network
458s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
-
submitted
15/04/2024, 14:11 UTC
General
-
Target
plugins/WebCam.dll
-
Size
43KB
-
MD5
c554ddb5db3ac1539d9ab7de049b8486
-
SHA1
050e77b2d762be186960cd4f4f2b1e476fd268a2
-
SHA256
3188c001ab60a37ca350093f7b53ebd01cb24950ed5b68331f5ff19ee28fc416
-
SHA512
f0a372740ee090a91e74d57760f459cc4022adadb421eaa6c6d285860e4288d13d5435d7f575175e8f9ca77819cd833509070124d6f7d121e7708877e579d3ef
-
SSDEEP
768:owsh76M4keW4Jon9Y5S3WlbGWFDKyUkbmPSIUdn+ybRuIZ:nshj4kuJe9YrB55JIUdn+yXZ
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\plugins\WebCam.dll,#11⤵
Network
-
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle -
DNSself.events.data.microsoft.comRemote address:8.8.8.8:53Requestself.events.data.microsoft.comIN AResponseself.events.data.microsoft.comIN CNAMEself-events-data.trafficmanager.netself-events-data.trafficmanager.netIN CNAMEonedscolprdwus04.westus.cloudapp.azure.comonedscolprdwus04.westus.cloudapp.azure.comIN A20.189.173.5
-
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEwu-bg-shim.trafficmanager.netwu-bg-shim.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A23.14.90.91a767.dspw65.akamai.netIN A23.14.90.82
-
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEwu-bg-shim.trafficmanager.netwu-bg-shim.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A23.14.90.82a767.dspw65.akamai.netIN A23.14.90.91
No results found
-
8.8.8.8:538.8.8.8.in-addr.arpadns
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
self.events.data.microsoft.com
DNS Response
20.189.173.5
DNS Request
ctldl.windowsupdate.com
DNS Response
23.14.90.9123.14.90.82
DNS Request
ctldl.windowsupdate.com
DNS Response
23.14.90.8223.14.90.91