Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

dllhost.exe

windows10-2004-x64

1

dllhst3g.exe

windows10-2004-x64

1

dmcertinst.exe

windows10-2004-x64

1

dmcfghost.exe

windows10-2004-x64

1

dmclient.exe

windows10-2004-x64

1

dnscacheugc.exe

windows10-2004-x64

4

doskey.exe

windows10-2004-x64

1

dpapimig.exe

windows10-2004-x64

1

dpnsvr.dll

windows10-2004-x64

1

driverquery.exe

windows10-2004-x64

1

drvinst.exe

windows10-2004-x64

1

ntprint.exe

windows10-2004-x64

1

nvspinfo.exe

windows10-2004-x64

1

odbcad32.exe

windows10-2004-x64

1

odbcconf.exe

windows10-2004-x64

1

ofdeploy.exe

windows10-2004-x64

1

omadmclient.exe

windows10-2004-x64

1

omadmprc.exe

windows10-2004-x64

1

openfiles.exe

windows10-2004-x64

1

osk.exe

windows10-2004-x64

3

pacjsworker.exe

windows10-2004-x64

1

pcalua.exe

windows10-2004-x64

1

pcaui.exe

windows10-2004-x64

1

pcwrun.exe

windows10-2004-x64

1

perfmon.exe

windows10-2004-x64

1

phoneactivate.exe

windows10-2004-x64

1

plasrv.exe

windows10-2004-x64

1

pnputil.exe

windows10-2004-x64

1

pospaymentsworker.exe

windows10-2004-x64

1

powercfg.exe

windows10-2004-x64

6

prevhost.exe

windows10-2004-x64

1

print.exe

windows10-2004-x64

1

Resubmissions

09/07/2024, 13:39

240709-qydwdayanf 7

09/07/2024, 07:52

240709-jqdr3swdle 6

09/07/2024, 06:42

240709-hgkzcs1bjl 5

09/07/2024, 06:34

240709-hb2d6azhjn 3

09/07/2024, 05:47

240709-ggxgqa1crh 4

Analysis

  • max time kernel
    125s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 07:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    pospaymentsworker.exe

  • Size

    68KB

  • MD5

    9897e5abd7586ee41a3437e234a384d9

  • SHA1

    9298bf77c0c660b253d99933b99a9e745fdd23be

  • SHA256

    7e3f640ec938f52f209d61e10dfbc188ccede44e5bcfb2ee23fd3dfa712b3375

  • SHA512

    96df9d3c1acac07d10699db9a806f712921f4d30104497bff7f340702b15e21c3686c06ab6ac3965d5eedf7bc7a427327ee81af0c715c870d2450914493e486b

  • SSDEEP

    1536:8hs10h56bm6ChXY8FRSbAnNid8VIV1MBB1cJIexE:8SI5OY9nNmoIV1kB1cJRxE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\pospaymentsworker.exe
    "C:\Users\Admin\AppData\Local\Temp\pospaymentsworker.exe"
    1⤵
      PID:3852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads