Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

parsec-windows.exe

windows7-x64

3

parsec-windows.exe

windows10-2004-x64

3

$PLUGINSDI...ID.dll

windows7-x64

3

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

parsecd.exe

windows7-x64

1

parsecd.exe

windows10-2004-x64

1

pservice.exe

windows7-x64

1

pservice.exe

windows10-2004-x64

1

skel/parse...3b.dll

windows7-x64

1

skel/parse...3b.dll

windows10-2004-x64

1

teams.exe

windows7-x64

1

teams.exe

windows10-2004-x64

1

vdd/parsec-vdd.exe

windows7-x64

3

vdd/parsec-vdd.exe

windows10-2004-x64

8

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

driver/mm.dll

windows10-2004-x64

1

nefconw.exe

windows7-x64

1

nefconw.exe

windows10-2004-x64

1

vddinstall.bat

windows7-x64

5

vddinstall.bat

windows10-2004-x64

8

vdduninstall.bat

windows7-x64

1

vdduninstall.bat

windows10-2004-x64

4

vusb/parsec-vud.exe

windows7-x64

3

Analysis

  • max time kernel
    1559s
  • max time network
    1565s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 14:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    nefconw.exe

  • Size

    574KB

  • MD5

    e9f2bc8c82ac755f47c7f89d1530f1a1

  • SHA1

    7ce5938c4b8a3eb4de49f7a7e34972f5f2acfcb5

  • SHA256

    cf746d1b0bbb713993d4a90dccd774c78d9fff8c2ba5a054b6c8f56c77e1eee1

  • SHA512

    86ed0a391d22631da9bdc7eb9cb096ba4de4c6619c6c4326030cb03d196b63e5aa156bac264a48d5b4cda7401844a3b5050259b41859d32e0c4d39b96913c2ce

  • SSDEEP

    12288:o27GX/DYwTLMcdMcYsWpP86/6L94gsleElgEo0JFoG:o27GX/DYwTLMcdMcYtF8S6L94gslbOED

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\nefconw.exe
    "C:\Users\Admin\AppData\Local\Temp\nefconw.exe"
    1⤵
      PID:3036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads