Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3AVProVideo.dll
windows7-x64
1AVProVideo.dll
windows10-2004-x64
1ClientAPI.dll
windows7-x64
3ClientAPI.dll
windows10-2004-x64
3FastDllC.dll
windows7-x64
1FastDllC.dll
windows10-2004-x64
1GLES_CM.dll
windows7-x64
1GLES_CM.dll
windows10-2004-x64
1InstallUtils.dll
windows7-x64
3InstallUtils.dll
windows10-2004-x64
3KeyLib.dll
windows7-x64
3KeyLib.dll
windows10-2004-x64
3NISEC_Reg.exe
windows7-x64
1NISEC_Reg.exe
windows10-2004-x64
1Prndriver.dll
windows7-x64
1Prndriver.dll
windows10-2004-x64
1System.dll
windows7-x64
3System.dll
windows10-2004-x64
3TWAIN.dll
windows7-x64
1TWAIN.dll
windows10-2004-x64
1ZfUninstall.dll
windows7-x64
1ZfUninstall.dll
windows10-2004-x64
3_CD91326D3...24.dll
windows7-x64
1_CD91326D3...24.dll
windows10-2004-x64
1_DC6FF09E2...49.exe
windows7-x64
1_DC6FF09E2...49.exe
windows10-2004-x64
1ldcam.exe
windows7-x64
1ldcam.exe
windows10-2004-x64
1setup.exe
windows7-x64
1setup.exe
windows10-2004-x64
1sharp-win32-ia32.dll
windows7-x64
1sharp-win32-ia32.dll
windows10-2004-x64
1Analysis
-
max time kernel
131s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2024, 03:24
Static task
static1
Behavioral task
behavioral1
Sample
AVProVideo.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
AVProVideo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
ClientAPI.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
ClientAPI.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
FastDllC.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
FastDllC.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
GLES_CM.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
GLES_CM.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
InstallUtils.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
InstallUtils.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
KeyLib.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
KeyLib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
NISEC_Reg.exe
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
NISEC_Reg.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Prndriver.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Prndriver.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
System.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
TWAIN.dll
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
TWAIN.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
ZfUninstall.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
ZfUninstall.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
_CD91326D388BE567C448CC259CA3C124.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
_CD91326D388BE567C448CC259CA3C124.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
_DC6FF09E203CC5D0099C0F5FF2B3DA49.exe
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
_DC6FF09E203CC5D0099C0F5FF2B3DA49.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
ldcam.exe
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
ldcam.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
setup.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
sharp-win32-ia32.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
sharp-win32-ia32.dll
Resource
win10v2004-20240508-en
General
-
Target
FastDllC.dll
-
Size
76KB
-
MD5
b8b31fe0f2b88b75c3fb6b49fcc5b81d
-
SHA1
1535ace3583a69cba97cbb6605accf387330bfac
-
SHA256
141d54eaf260260afd684101d0fb5a1722c1a232cad8f5d94c1bc0203719da31
-
SHA512
ee18cab861aa25e5de30e8a7f454b973dfb25aa7a744caf950239fdcd7baab763fc9fa4f236f2fdab33194cf49be8157ffc77d4f221b7371e4b8eead735e7f76
-
SSDEEP
1536:qwPAH4g1Ez5XPvGQioikflI7W6NwQr++INXYCzBaYv2E+S:lPvPvG5eflIC6NT++IiCsu2E+
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1968 wrote to memory of 1324 1968 rundll32.exe 86 PID 1968 wrote to memory of 1324 1968 rundll32.exe 86 PID 1968 wrote to memory of 1324 1968 rundll32.exe 86