Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

dllhost.exe

windows10-2004-x64

1

dllhst3g.exe

windows10-2004-x64

1

dmcertinst.exe

windows10-2004-x64

1

dmcfghost.exe

windows10-2004-x64

1

dmclient.exe

windows10-2004-x64

1

dnscacheugc.exe

windows10-2004-x64

4

doskey.exe

windows10-2004-x64

1

dpapimig.exe

windows10-2004-x64

1

dpnsvr.dll

windows10-2004-x64

1

driverquery.exe

windows10-2004-x64

1

drvinst.exe

windows10-2004-x64

1

ntprint.exe

windows10-2004-x64

1

nvspinfo.exe

windows10-2004-x64

1

odbcad32.exe

windows10-2004-x64

1

odbcconf.exe

windows10-2004-x64

1

ofdeploy.exe

windows10-2004-x64

1

omadmclient.exe

windows10-2004-x64

1

omadmprc.exe

windows10-2004-x64

1

openfiles.exe

windows10-2004-x64

1

osk.exe

windows10-2004-x64

3

pacjsworker.exe

windows10-2004-x64

1

pcalua.exe

windows10-2004-x64

1

pcaui.exe

windows10-2004-x64

1

pcwrun.exe

windows10-2004-x64

1

perfmon.exe

windows10-2004-x64

1

phoneactivate.exe

windows10-2004-x64

1

plasrv.exe

windows10-2004-x64

1

pnputil.exe

windows10-2004-x64

1

pospaymentsworker.exe

windows10-2004-x64

1

powercfg.exe

windows10-2004-x64

6

prevhost.exe

windows10-2004-x64

1

print.exe

windows10-2004-x64

1

Resubmissions

09/07/2024, 13:39

240709-qydwdayanf 7

09/07/2024, 07:52

240709-jqdr3swdle 6

09/07/2024, 06:42

240709-hgkzcs1bjl 5

09/07/2024, 06:34

240709-hb2d6azhjn 3

09/07/2024, 05:47

240709-ggxgqa1crh 4

Analysis

  • max time kernel
    132s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 07:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    prevhost.exe

  • Size

    52KB

  • MD5

    f4180a9c9a506036562698e7907976b3

  • SHA1

    54968048e81d47885ca95c39d08b4356f3256c21

  • SHA256

    38dc2f79eb4f6b7b7dfad2b7143cdc5ce0faafbb32b53f63f4d1f540d397cf34

  • SHA512

    04869be6c3c6ca4ee2ad45eb49ef1c4d9d74821dd85143eb2b6b3e2cfc6251a39269b18506ee88294cfeff226902086b254c4fd02193cccfa4aa3a843f9d2946

  • SSDEEP

    768:jmJf3dpaoUxZIg9cMkshRG1rF0XBZ4bATjLTDNsUNyxX:jmJlpa+/shRG9xbAL2UNyxX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\prevhost.exe
    "C:\Users\Admin\AppData\Local\Temp\prevhost.exe"
    1⤵
      PID:3720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads