Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3游戏窗�...ss.dll
windows7-x64
1游戏窗�...ss.dll
windows10-2004-x64
1游戏窗�...ng.exe
windows7-x64
1游戏窗�...ng.exe
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1游戏窗�...es.dll
windows7-x64
1游戏窗�...es.dll
windows10-2004-x64
1Analysis
-
max time kernel
139s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2024, 14:29 UTC
Static task
static1
Behavioral task
behavioral1
Sample
游戏窗口无损缩小放大工具 v2.2.6/Lossless.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
游戏窗口无损缩小放大工具 v2.2.6/Lossless.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
游戏窗口无损缩小放大工具 v2.2.6/LosslessScaling.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
游戏窗口无损缩小放大工具 v2.2.6/LosslessScaling.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
游戏窗口无损缩小放大工具 v2.2.6/de/LosslessScaling.resources.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
游戏窗口无损缩小放大工具 v2.2.6/de/LosslessScaling.resources.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
游戏窗口无损缩小放大工具 v2.2.6/es/LosslessScaling.resources.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
游戏窗口无损缩小放大工具 v2.2.6/es/LosslessScaling.resources.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
游戏窗口无损缩小放大工具 v2.2.6/fr/LosslessScaling.resources.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
游戏窗口无损缩小放大工具 v2.2.6/fr/LosslessScaling.resources.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
游戏窗口无损缩小放大工具 v2.2.6/it/LosslessScaling.resources.dll
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
游戏窗口无损缩小放大工具 v2.2.6/it/LosslessScaling.resources.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
游戏窗口无损缩小放大工具 v2.2.6/ja/LosslessScaling.resources.dll
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
游戏窗口无损缩小放大工具 v2.2.6/ja/LosslessScaling.resources.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
游戏窗口无损缩小放大工具 v2.2.6/ko/LosslessScaling.resources.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
游戏窗口无损缩小放大工具 v2.2.6/ko/LosslessScaling.resources.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
游戏窗口无损缩小放大工具 v2.2.6/pl/LosslessScaling.resources.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
游戏窗口无损缩小放大工具 v2.2.6/pl/LosslessScaling.resources.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
游戏窗口无损缩小放大工具 v2.2.6/pt-BR/LosslessScaling.resources.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
游戏窗口无损缩小放大工具 v2.2.6/pt-BR/LosslessScaling.resources.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
游戏窗口无损缩小放大工具 v2.2.6/tr/LosslessScaling.resources.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
游戏窗口无损缩小放大工具 v2.2.6/tr/LosslessScaling.resources.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
游戏窗口无损缩小放大工具 v2.2.6/uk/LosslessScaling.resources.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
游戏窗口无损缩小放大工具 v2.2.6/uk/LosslessScaling.resources.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
游戏窗口无损缩小放大工具 v2.2.6/zh-CN/LosslessScaling.resources.dll
Resource
win7-20240419-en
Behavioral task
behavioral26
Sample
游戏窗口无损缩小放大工具 v2.2.6/zh-CN/LosslessScaling.resources.dll
Resource
win10v2004-20240426-en
General
-
Target
游戏窗口无损缩小放大工具 v2.2.6/tr/LosslessScaling.resources.dll
-
Size
16KB
-
MD5
bc90439edcfa79f13d66241dc755f3de
-
SHA1
51c6ba7c33aae02e600521ed1c584c7ab3e24f99
-
SHA256
47c60f7f818df998739c5c8c0479148c4e49335172b0d1bb73528413f29185d3
-
SHA512
d01c4a81de5097a6a31ec8a62be2a5ed006e69f24b90e57d09cc04b3d561286d44e701bfaee462727d22ce29eccdb1198fe35703e0a4e134e65ec340d9b1a160
-
SSDEEP
192:/1dXPaaehfBGWpOayjaEHgmRUMZOMEr64zC/8LwaNRQc8zxKiy6U0l5cwWFf0m64:tV65slnHbOM/4zH8zZU0swWFfnL
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\游戏窗口无损缩小放大工具 v2.2.6\tr\LosslessScaling.resources.dll",#11⤵PID:1804
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4104 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:81⤵PID:4060
Network
-
Remote address:8.8.8.8:53Request28.118.140.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request216.143.123.92.in-addr.arpaIN PTRResponse216.143.123.92.in-addr.arpaIN PTRa92-123-143-216deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request140.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request183.142.211.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request164.189.21.2.in-addr.arpaIN PTRResponse164.189.21.2.in-addr.arpaIN PTRa2-21-189-164deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request23.236.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request252.15.104.51.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
28.118.140.52.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
216.143.123.92.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
140.32.126.40.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
183.142.211.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
164.189.21.2.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
73.144.22.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
23.236.111.52.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
240.221.184.93.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
252.15.104.51.in-addr.arpa