Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

ec4a958ab7...dd.exe

windows11-21h2-x64

8

rptcache64.dll

windows11-21h2-x64

1

rtfile32.dll

windows11-21h2-x64

1

rtfile64.dll

windows11-21h2-x64

1

rtinfo32.dll

windows11-21h2-x64

4

rtinfo64.dll

windows11-21h2-x64

4

screenhooks32.dll

windows11-21h2-x64

1

scrnrcd32.dll

windows11-21h2-x64

1

scrnrcd64.dll

windows11-21h2-x64

1

sensinfo32.dll

windows11-21h2-x64

1

sensinfo64.dll

windows11-21h2-x64

1

setuphlpr.dll

windows11-21h2-x64

1

shlext32.dll

windows11-21h2-x64

1

shlext64.dll

windows11-21h2-x64

7

siriuv32.dll

windows11-21h2-x64

1

siriuv64.dll

windows11-21h2-x64

1

sqlcipher32.dll

windows11-21h2-x64

3

sqlcipher64.dll

windows11-21h2-x64

1

sscanner32.dll

windows11-21h2-x64

1

sscanner64.dll

windows11-21h2-x64

1

ssleay32.dll

windows11-21h2-x64

1

ssleay64.dll

windows11-21h2-x64

1

swvv32.sys

windows11-21h2-x64

1

swvv64.sys

windows11-21h2-x64

1

swvv64_win7.sys

windows11-21h2-x64

1

unrar32.dll

windows11-21h2-x64

3

unrar64.dll

windows11-21h2-x64

1

usbmgr32.dll

windows11-21h2-x64

1

usbmgr64.dll

windows11-21h2-x64

1

winpcap_inst.exe

windows11-21h2-x64

8

workflow32.dll

windows11-21h2-x64

1

workflow64.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28/04/2024, 10:49 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    swvv64.sys

  • Size

    228KB

  • MD5

    38d4705971aa8797bbf154856df90f69

  • SHA1

    05fa1fa1b51e7d29b2819470b4dc6fea6f17292b

  • SHA256

    de0feedf477d4dfc63563bbc974045d63758459abad87b5fed52e670932ff3f5

  • SHA512

    20d2726b7f3eac7ba8390c215d46d392444e32ba4b66333b7f92e87a5b4b7de6a3d26a41808737c076d2a0ec0c07f365f0d9ec76e6fc7f7828fd22ac799dd9ff

  • SSDEEP

    6144:sdI5HdbDwdeYTJhreVIqqDL6Mxlom9fivKXape:4IkMahreVNqn6afiCXB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\swvv64.sys
    1⤵
      PID:492
      • C:\Users\Admin\AppData\Local\Temp\swvv64.sys
        C:\Users\Admin\AppData\Local\Temp\swvv64.sys
        2⤵
          PID:1820

      Network

      • flag-us
        DNS
        8.8.8.8.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        8.8.8.8.in-addr.arpa
        IN PTR
      • flag-us
        DNS
        8.8.8.8.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        8.8.8.8.in-addr.arpa
        IN PTR
      • flag-us
        DNS
        8.8.8.8.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        8.8.8.8.in-addr.arpa
        IN PTR
      • flag-us
        DNS
        8.8.8.8.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        8.8.8.8.in-addr.arpa
        IN PTR
      • flag-us
        DNS
        8.8.8.8.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        8.8.8.8.in-addr.arpa
        IN PTR
      No results found
      • 8.8.8.8:53
        8.8.8.8.in-addr.arpa
        dns
        330 B
         5

        DNS Request

        8.8.8.8.in-addr.arpa

        DNS Request

        8.8.8.8.in-addr.arpa

        DNS Request

        8.8.8.8.in-addr.arpa

        DNS Request

        8.8.8.8.in-addr.arpa

        DNS Request

        8.8.8.8.in-addr.arpa

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1820-0-0x0000000000010000-0x0000000000051000-memory.dmp

        Filesize

        260KB

        Download

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.