Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    311d327646d96a942f18a7fe4a09dc0a0c6a4f0cfd1e2842400bac80d0cdadec.zip

  • Size

    3.0MB

  • MD5

    eb323c80948eb53262ed96dcda08b63e

  • SHA1

    d8c351574e7307e8aba68f5c4145ea40ddb22207

  • SHA256

    30fe7a7d5ac9b610d4a837bb343ebe3f1be7a6019c0ca439ef1b895cabd7e5a8

  • SHA512

    f627b4cb55ed55a0ec638f01778f381982c24d558c15df437b7aa5fbe5f4b0ea86a64596ab01f8e132ad36a87c586d45fd4bd888b768c83a4e955510cfe9fd01

  • SSDEEP

    98304:bXbqKwjoSOdUTGo5A5NaQgdnqQfDUGRp7YwTW14vA3:bLqSSOdTo25NaQgVqQfrswTW6s

Score
1/10

Malware Config

Signatures

Files

  • 311d327646d96a942f18a7fe4a09dc0a0c6a4f0cfd1e2842400bac80d0cdadec.zip
    .zip

    Password: infected

  • 311d327646d96a942f18a7fe4a09dc0a0c6a4f0cfd1e2842400bac80d0cdadec.zip
    .zip

    Password: infected

  • HTCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    6ba08298dd09ea8e41ab7285d3183bba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NSM.LIC
  • NSM.ini
  • PCICHEK.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    1233e02b30a7c416ba5aa017ff2ba312


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PCICL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    3e09384870fa6c1a29cc37553985fcc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TCCTL32.DLL
    .dll windows:5 windows x86 arch:x86

    Password: infected

    2c4d798bb87ec57193b7625c4259da43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • client32.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    78ed70ebeb178ed1bae5921d2ed514bc


    Code Sign

    Headers

    Imports

    Sections

  • client32.ini
  • install/24.4.4.1168.manifest
  • install/brand_config
  • install/browser.VisualElementsManifest.xml
  • install/clidmgr.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    994d1bcde44281f4376792fc9383ef1b


    Code Sign

    Headers

    Imports

    Sections

  • install/install_state.json
  • install/manifest.json
  • install/partner-package.cab
    .cab

    Password: infected

  • partner_config
  • resources/configs/all_zip
    .zip
  • resources/tablo
  • install/preloaded_data.pb
  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nskbfltr.inf
  • nsm_vpro.ini
  • pcicapi.dll
    .dll windows:5 windows x86 arch:x86

    d78463f91aa83e9c39d2e594035ae4bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remcmdstub.exe
    .exe windows:5 windows x86 arch:x86

    99c0cd957fc7334714fefa3daa61a6ea


    Code Sign

    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.