Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2995.exe

windows7-x64

3

2995.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    140s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 00:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2995.exe

  • Size

    2.3MB

  • MD5

    847db9295bd7d6c5bbea9c8bbd547b57

  • SHA1

    a126f281ef84e24b664efe65b930c92fca492f7f

  • SHA256

    551bde43f12e7e4916a365165052e518a5494704a3cdf3afd6723b636ed39fb1

  • SHA512

    6e5ddbf31df67893b7a9a3baa72f86d0aa8d0f3469e549a77fff6e261770d55bb2dd9bf6c62e9f852363b9bb6c662db785aac2b0d1ce563ba4c8c12604f59332

  • SSDEEP

    24576:Felo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfBxquGjHneFUJfKviVmt1:gl+h+1qs0Y/BTmQuGjHnevvXv

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2995.exe
    "C:\Users\Admin\AppData\Local\Temp\2995.exe"
    1⤵
      PID:1356
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4260,i,7545522914305657361,9950105517201397946,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:8
      1⤵
        PID:3916

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1356-0-0x00000000022B0000-0x00000000022B1000-memory.dmp

        Filesize

        4KB

        Download

      • memory/1356-1-0x0000000000400000-0x0000000000640000-memory.dmp

        Filesize

        2.2MB

        Download

      • memory/1356-3-0x00000000022B0000-0x00000000022B1000-memory.dmp

        Filesize

        4KB

        Download