Overview

overview

1

Static

static

1

PrinterCon...M.appx

windows7-x64

PrinterCon...M.appx

windows10-2004-x64

PrinterCon...r.appx

windows7-x64

PrinterCon...r.appx

windows10-2004-x64

PrinterCon...g.appx

windows7-x64

PrinterCon...g.appx

windows10-2004-x64

PrinterCon...a.appx

windows7-x64

PrinterCon...a.appx

windows10-2004-x64

PrinterCon...s.appx

windows7-x64

PrinterCon...s.appx

windows10-2004-x64

PrinterCon...a.appx

windows7-x64

PrinterCon...a.appx

windows10-2004-x64

PrinterCon...e.appx

windows7-x64

PrinterCon...e.appx

windows10-2004-x64

PrinterCon...l.appx

windows7-x64

PrinterCon...l.appx

windows10-2004-x64

PrinterCon...s.appx

windows7-x64

PrinterCon...s.appx

windows10-2004-x64

PrinterCon...t.appx

windows7-x64

PrinterCon...t.appx

windows10-2004-x64

PrinterCon...i.appx

windows7-x64

PrinterCon...i.appx

windows10-2004-x64

PrinterCon...r.appx

windows7-x64

PrinterCon...r.appx

windows10-2004-x64

PrinterCon...e.appx

windows7-x64

PrinterCon...e.appx

windows10-2004-x64

PrinterCon...r.appx

windows7-x64

PrinterCon...r.appx

windows10-2004-x64

PrinterCon...u.appx

windows7-x64

PrinterCon...u.appx

windows10-2004-x64

PrinterCon...d.appx

windows7-x64

PrinterCon...d.appx

windows10-2004-x64

Analysis

  • max time network
    12s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 07:45 UTC

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: Cannot install appx package exit status 0xffffffff Add-AppxPackage : Deployment failed with HRESULT: 0x80073CF3, Package failed updates, dependency or conflict validation. Windows cannot install resource package AD2F1837.HPPrinterControl_v10z8vjag6ke6 because the app package it requires could not be found. Ensure that the app package is installed before installing the resource package NOTE: For additional information, look for [ActivityId] c8ff4651-bc38-0001-936c-ffc838bcda01 in the Event Log or use the command line Get-AppPackageLog -ActivityID c8ff4651-bc38-0001-936c-ffc838bcda01 At line:1 char:102 + ... kage_141.2.441.0_language-bg.appx";Add-AppxPackage $appx_file;if( -no ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : WriteError: (C:\Users\Admin\...anguage-bg.appx:String) [Add-AppxPackage], IOException + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand
Report Analysis Logs

General

  • Target

    PrinterControl4Package_141.2.441.0_language-bg.appx

  • Size

    329KB

  • MD5

    fbd3713f185648a184d2b33cf3c671e2

  • SHA1

    827ef3ff2864a158bb41ed2943d12d039ae745c8

  • SHA256

    03cf187be8de553287d0e77a2f79fc49e61024ffaf83436ec7622648511d0f05

  • SHA512

    96910d8bcd8eb58f0362e42416eb873c437eea53ff7cb552170e99230e7803f9ba4a163ce38c02669f949668b63387694148ab6d7eb387da7be6e0c9d02cc920

  • SSDEEP

    6144:xiacSSXph2mrszkTDqEGIJLGt5EjzlL6w5/JgVzq2WzyTVcQpbE7XzN:xPumm4zkAELbjpOY/iq2AQcx7X5

Score
1/10

Malware Config

Signatures

Processes

Network

  • flag-us
    DNS
    g.bing.com
    Remote address:
    8.8.8.8:53
    Request
    g.bing.com
    IN A
    Response
    g.bing.com
    IN CNAME
    g-bing-com.dual-a-0034.a-msedge.net
    g-bing-com.dual-a-0034.a-msedge.net
    IN CNAME
    dual-a-0034.a-msedge.net
    dual-a-0034.a-msedge.net
    IN A
    204.79.197.237
    dual-a-0034.a-msedge.net
    IN A
    13.107.21.237
  • flag-us
    DNS
    217.106.137.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    217.106.137.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    20.160.190.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    20.160.190.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    237.197.79.204.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    237.197.79.204.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    26.35.223.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    26.35.223.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    155.61.62.23.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    155.61.62.23.in-addr.arpa
    IN PTR
    Response
    155.61.62.23.in-addr.arpa
    IN PTR
    a23-62-61-155deploystaticakamaitechnologiescom
  • flag-us
    DNS
    133.211.185.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    133.211.185.52.in-addr.arpa
    IN PTR
    Response
  • 204.79.197.237:443
    g.bing.com
    tls
    2.5kB
     9.1kB
     19
    17
  • 23.62.61.155:443
    www.bing.com
    tls
    1.4kB
     5.5kB
     16
    15
  • 8.8.8.8:53
    g.bing.com
    dns
    56 B
     151 B
     1
    1

    DNS Request

    g.bing.com

    DNS Response

    204.79.197.237
    13.107.21.237

  • 8.8.8.8:53
    217.106.137.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    217.106.137.52.in-addr.arpa

  • 8.8.8.8:53
    20.160.190.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    20.160.190.20.in-addr.arpa

  • 8.8.8.8:53
    237.197.79.204.in-addr.arpa
    dns
    73 B
     143 B
     1
    1

    DNS Request

    237.197.79.204.in-addr.arpa

  • 8.8.8.8:53
    26.35.223.20.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    26.35.223.20.in-addr.arpa

  • 8.8.8.8:53
    155.61.62.23.in-addr.arpa
    dns
    71 B
     135 B
     1
    1

    DNS Request

    155.61.62.23.in-addr.arpa

  • 8.8.8.8:53
    133.211.185.52.in-addr.arpa
    dns
    73 B
     147 B
     1
    1

    DNS Request

    133.211.185.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.