Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

bin/antvms.dll

windows7-x64

1

bin/antvms.dll

windows10-2004-x64

1

bin/debug/AnyDesk.exe

windows7-x64

5

bin/debug/AnyDesk.exe

windows10-2004-x64

5

bin/debug/...in.exe

windows7-x64

10

bin/debug/...in.exe

windows10-2004-x64

10

bin/releas...se.exe

windows7-x64

10

bin/releas...se.exe

windows10-2004-x64

10

bin/traffi...or.dll

windows7-x64

1

bin/traffi...or.dll

windows10-2004-x64

1

bin/xfcmain.dll

windows7-x64

1

bin/xfcmain.dll

windows10-2004-x64

1

bin/xfcstart.dll

windows7-x64

1

bin/xfcstart.dll

windows10-2004-x64

1

debugger.exe

windows7-x64

10

debugger.exe

windows10-2004-x64

10

execution.dll

windows7-x64

1

execution.dll

windows10-2004-x64

1

injectprint.dll

windows10-2004-x64

3

lz4.dll

windows7-x64

1

lz4.dll

windows10-2004-x64

1

offsets.dll

windows7-x64

1

offsets.dll

windows10-2004-x64

1

topware.inject.js

windows7-x64

3

topware.inject.js

windows10-2004-x64

3

topware.py

windows7-x64

3

topware.py

windows10-2004-x64

3

xxhash.dll

windows7-x64

1

xxhash.dll

windows10-2004-x64

1

zinl1.dll

windows7-x64

1

zinl1.dll

windows10-2004-x64

1

zlib1.dll

windows7-x64

1

Analysis

  • max time kernel
    124s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/07/2024, 03:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    xxhash.dll

  • Size

    45KB

  • MD5

    161bd3d60228dd16c54a927250af3e49

  • SHA1

    463243c3cc2e0bca16f3ced2c3b70c13a0e97fa6

  • SHA256

    ecb5aa2bf0ff355a7b36bb3a991264655e13e0f2c9e88b9dfa39d7fe4c5142a7

  • SHA512

    3716ce34c1e9931007f374685a6588bc355e942872e7a42eaa4c5be9a0fdc93f081a1dc5c3d8fec4a4563dbd556f4d046f7bf3d50840c02d8aa822eaca7a577b

  • SSDEEP

    768:I9otvM7DZ1LMDJdj+LVvgFlJus4zBOQdlyR0/A:I9UEDLMDJxKM0scUS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\xxhash.dll,#1
    1⤵
      PID:5068
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3928,i,18341222626402534844,12352985901844242237,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
      1⤵
        PID:4500

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads