Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

parsec-windows.exe

windows7-x64

3

parsec-windows.exe

windows10-2004-x64

3

$PLUGINSDI...ID.dll

windows7-x64

3

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

parsecd.exe

windows7-x64

1

parsecd.exe

windows10-2004-x64

1

pservice.exe

windows7-x64

1

pservice.exe

windows10-2004-x64

1

skel/parse...3b.dll

windows7-x64

1

skel/parse...3b.dll

windows10-2004-x64

1

teams.exe

windows7-x64

1

teams.exe

windows10-2004-x64

1

vdd/parsec-vdd.exe

windows7-x64

3

vdd/parsec-vdd.exe

windows10-2004-x64

8

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

driver/mm.dll

windows10-2004-x64

1

nefconw.exe

windows7-x64

1

nefconw.exe

windows10-2004-x64

1

vddinstall.bat

windows7-x64

5

vddinstall.bat

windows10-2004-x64

8

vdduninstall.bat

windows7-x64

1

vdduninstall.bat

windows10-2004-x64

4

vusb/parsec-vud.exe

windows7-x64

3

Analysis

  • max time kernel
    1787s
  • max time network
    1805s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/05/2024, 14:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    nefconw.exe

  • Size

    574KB

  • MD5

    e9f2bc8c82ac755f47c7f89d1530f1a1

  • SHA1

    7ce5938c4b8a3eb4de49f7a7e34972f5f2acfcb5

  • SHA256

    cf746d1b0bbb713993d4a90dccd774c78d9fff8c2ba5a054b6c8f56c77e1eee1

  • SHA512

    86ed0a391d22631da9bdc7eb9cb096ba4de4c6619c6c4326030cb03d196b63e5aa156bac264a48d5b4cda7401844a3b5050259b41859d32e0c4d39b96913c2ce

  • SSDEEP

    12288:o27GX/DYwTLMcdMcYsWpP86/6L94gsleElgEo0JFoG:o27GX/DYwTLMcdMcYtF8S6L94gslbOED

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\nefconw.exe
    "C:\Users\Admin\AppData\Local\Temp\nefconw.exe"
    1⤵
      PID:2636
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1420 --field-trial-handle=1928,i,13242902252791919845,10377620236057253993,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3612
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3728 --field-trial-handle=1928,i,13242902252791919845,10377620236057253993,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:3816

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads