Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

Release.zip

windows7-x64

1

Release.zip

windows10-2004-x64

1

Release/CeleryApp.exe

windows7-x64

1

Release/CeleryApp.exe

windows10-2004-x64

6

Release/bi...ain.js

windows7-x64

3

Release/bi...ain.js

windows10-2004-x64

3

Release/bi...bap.js

windows7-x64

3

Release/bi...bap.js

windows10-2004-x64

3

Release/bi...pex.js

windows7-x64

3

Release/bi...pex.js

windows10-2004-x64

3

Release/bi...cli.js

windows7-x64

3

Release/bi...cli.js

windows10-2004-x64

3

Release/bi...bat.js

windows7-x64

3

Release/bi...bat.js

windows10-2004-x64

3

Release/bi...igo.js

windows7-x64

3

Release/bi...igo.js

windows10-2004-x64

3

Release/bi...ure.js

windows7-x64

3

Release/bi...ure.js

windows10-2004-x64

3

Release/bi...fee.js

windows7-x64

3

Release/bi...fee.js

windows10-2004-x64

3

Release/bi...cpp.js

windows7-x64

3

Release/bi...cpp.js

windows10-2004-x64

3

Release/bi...arp.js

windows7-x64

3

Release/bi...arp.js

windows10-2004-x64

3

Release/bi...csp.js

windows7-x64

3

Release/bi...csp.js

windows10-2004-x64

3

Release/bi...css.js

windows7-x64

3

Release/bi...css.js

windows10-2004-x64

3

Release/bi...art.js

windows7-x64

3

Release/bi...art.js

windows10-2004-x64

3

Release/bi...ile.js

windows7-x64

3

Release/bi...ile.js

windows10-2004-x64

3

Resubmissions

01/07/2024, 07:04 UTC

240701-hv4nmasckk 3

01/07/2024, 06:54 UTC

240701-hpnp8aydne 6

01/07/2024, 06:50 UTC

240701-hmedrsydjc 6

Analysis

  • max time kernel
    93s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/07/2024, 06:50 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Release/bin/Monaco/package/dev/vs/basic-languages/coffee/coffee.js

  • Size

    8KB

  • MD5

    778339eb31afb7882486697d98c53b3a

  • SHA1

    94cd80e7ccbc14d86e2514f6736c376c145120ca

  • SHA256

    dcdd9bf38160bbaf18d8f2a976d04bb17ba143a4924058466b82dda2c1be3bcd

  • SHA512

    a0d65efe6ec6ec9053550c56a55d9f34713dd7e62856ca2a381162c573ebd5a6b36d859c5893734be7cb8a5b4019034b91da7f8bf72b01fc3e2d5adf32d05ccf

  • SSDEEP

    96:HDGk08NBI0D/F8R5HFK3JPElZGHf4VTi8jQ5CQFvmieiadR0cRvv0e3v0mB9ME/Y:r/V/A5lIPmggVO8jQ5CQFvmieRRvHs

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Release\bin\Monaco\package\dev\vs\basic-languages\coffee\coffee.js
    1⤵
      PID:1344
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4068 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3864

      Network

      • flag-us
        DNS
        183.142.211.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        183.142.211.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        172.210.232.199.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        172.210.232.199.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        68.32.126.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        68.32.126.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        95.221.229.192.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        95.221.229.192.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        86.23.85.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        86.23.85.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        217.106.137.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        217.106.137.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        18.31.95.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        18.31.95.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        107.12.20.2.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        107.12.20.2.in-addr.arpa
        IN PTR
        Response
        107.12.20.2.in-addr.arpa
        IN PTR
        a2-20-12-107deploystaticakamaitechnologiescom
      • flag-us
        DNS
        58.55.71.13.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        58.55.71.13.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        172.214.232.199.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        172.214.232.199.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        chromewebstore.googleapis.com
        Remote address:
        8.8.8.8:53
        Request
        chromewebstore.googleapis.com
        IN A
        Response
        chromewebstore.googleapis.com
        IN A
        142.250.187.234
        chromewebstore.googleapis.com
        IN A
        216.58.212.202
        chromewebstore.googleapis.com
        IN A
        172.217.169.74
        chromewebstore.googleapis.com
        IN A
        142.250.179.234
        chromewebstore.googleapis.com
        IN A
        216.58.204.74
        chromewebstore.googleapis.com
        IN A
        142.250.178.10
        chromewebstore.googleapis.com
        IN A
        142.250.200.10
        chromewebstore.googleapis.com
        IN A
        216.58.213.10
        chromewebstore.googleapis.com
        IN A
        142.250.187.202
        chromewebstore.googleapis.com
        IN A
        172.217.16.234
        chromewebstore.googleapis.com
        IN A
        142.250.180.10
        chromewebstore.googleapis.com
        IN A
        216.58.201.106
        chromewebstore.googleapis.com
        IN A
        142.250.200.42
      • flag-us
        DNS
        chromewebstore.googleapis.com
        Remote address:
        8.8.8.8:53
        Request
        chromewebstore.googleapis.com
        IN Unknown
        Response
      • flag-us
        DNS
        234.187.250.142.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        234.187.250.142.in-addr.arpa
        IN PTR
        Response
        234.187.250.142.in-addr.arpa
        IN PTR
        lhr25s34-in-f101e100net
      • flag-us
        DNS
        31.243.111.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        31.243.111.52.in-addr.arpa
        IN PTR
        Response
      • 20.231.121.79:80
        46 B
         1
      • 142.250.187.234:443
        chromewebstore.googleapis.com
        tls
        2.0kB
         7.7kB
         16
        17
      • 8.8.8.8:53
        183.142.211.20.in-addr.arpa
        dns
        73 B
         159 B
         1
        1

        DNS Request

        183.142.211.20.in-addr.arpa

      • 8.8.8.8:53
        172.210.232.199.in-addr.arpa
        dns
        74 B
         128 B
         1
        1

        DNS Request

        172.210.232.199.in-addr.arpa

      • 8.8.8.8:53
        68.32.126.40.in-addr.arpa
        dns
        71 B
         157 B
         1
        1

        DNS Request

        68.32.126.40.in-addr.arpa

      • 8.8.8.8:53
        95.221.229.192.in-addr.arpa
        dns
        73 B
         144 B
         1
        1

        DNS Request

        95.221.229.192.in-addr.arpa

      • 8.8.8.8:53
        86.23.85.13.in-addr.arpa
        dns
        70 B
         144 B
         1
        1

        DNS Request

        86.23.85.13.in-addr.arpa

      • 8.8.8.8:53
        217.106.137.52.in-addr.arpa
        dns
        73 B
         147 B
         1
        1

        DNS Request

        217.106.137.52.in-addr.arpa

      • 8.8.8.8:53
        18.31.95.13.in-addr.arpa
        dns
        70 B
         144 B
         1
        1

        DNS Request

        18.31.95.13.in-addr.arpa

      • 8.8.8.8:53
        107.12.20.2.in-addr.arpa
        dns
        70 B
         133 B
         1
        1

        DNS Request

        107.12.20.2.in-addr.arpa

      • 8.8.8.8:53
        58.55.71.13.in-addr.arpa
        dns
        70 B
         144 B
         1
        1

        DNS Request

        58.55.71.13.in-addr.arpa

      • 8.8.8.8:53
        172.214.232.199.in-addr.arpa
        dns
        74 B
         128 B
         1
        1

        DNS Request

        172.214.232.199.in-addr.arpa

      • 8.8.8.8:53
        chromewebstore.googleapis.com
        dns
        75 B
         283 B
         1
        1

        DNS Request

        chromewebstore.googleapis.com

        DNS Response

        142.250.187.234
        216.58.212.202
        172.217.169.74
        142.250.179.234
        216.58.204.74
        142.250.178.10
        142.250.200.10
        216.58.213.10
        142.250.187.202
        172.217.16.234
        142.250.180.10
        216.58.201.106
        142.250.200.42

      • 8.8.8.8:53
        chromewebstore.googleapis.com
        dns
        75 B
         132 B
         1
        1

        DNS Request

        chromewebstore.googleapis.com

      • 8.8.8.8:53
        234.187.250.142.in-addr.arpa
        dns
        74 B
         113 B
         1
        1

        DNS Request

        234.187.250.142.in-addr.arpa

      • 8.8.8.8:53
        31.243.111.52.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        31.243.111.52.in-addr.arpa

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.