Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3!#Fileş_#...__.zip
windows7-x64
1!#Fileş_#...__.zip
windows10-2004-x64
1Resource/C...tity-H
windows7-x64
1Resource/C...tity-H
windows10-2004-x64
1Resource/C...tity-V
windows7-x64
1Resource/C...tity-V
windows10-2004-x64
1Resource/C...BK-EUC
windows7-x64
1Resource/C...BK-EUC
windows10-2004-x64
1Resource/C...TF16-H
windows7-x64
1Resource/C...TF16-H
windows10-2004-x64
1Resource/C...TF16-V
windows7-x64
1Resource/C...TF16-V
windows10-2004-x64
1Resource/F...td.otf
windows7-x64
3Resource/F...td.otf
windows10-2004-x64
7Resource/F...ld.otf
windows7-x64
3Resource/F...ld.otf
windows10-2004-x64
7Resource/F...ue.otf
windows7-x64
3Resource/F...ue.otf
windows10-2004-x64
7Resource/F...ue.otf
windows7-x64
3Resource/F...ue.otf
windows10-2004-x64
7Resource/F...td.otf
windows7-x64
3Resource/F...td.otf
windows10-2004-x64
7Resource/F...ld.otf
windows7-x64
3Resource/F...ld.otf
windows10-2004-x64
7Resource/F...It.otf
windows7-x64
3Resource/F...It.otf
windows10-2004-x64
7Resource/F...It.otf
windows7-x64
3Resource/F...It.otf
windows10-2004-x64
7Resource/F...ar.otf
windows7-x64
3Resource/F...ar.otf
windows10-2004-x64
7Resource/F...ld.otf
windows7-x64
3Resource/F...ld.otf
windows10-2004-x64
7Analysis
-
max time kernel
146s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
26/07/2024, 18:28 UTC
Static task
static1
Behavioral task
behavioral1
Sample
!#Fileş_#!UŞe~Passw0rd__~.~260717~.~__.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
!#Fileş_#!UŞe~Passw0rd__~.~260717~.~__.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Resource/CMap/Identity-H
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Resource/CMap/Identity-H
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Resource/CMap/Identity-V
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Resource/CMap/Identity-V
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Resource/CMap/UCS2-GBK-EUC
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Resource/CMap/UniKS-UTF16-V
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Resource/CMap/UniKS-UTF16-V
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Resource/Font/AdobePIStd.otf
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Resource/Font/AdobePIStd.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Resource/Font/CourierStd-Bold.otf
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Resource/Font/CourierStd-Bold.otf
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
Resource/Font/CourierStd-BoldOblique.otf
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Resource/Font/CourierStd-BoldOblique.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Resource/Font/CourierStd-Oblique.otf
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Resource/Font/CourierStd-Oblique.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Resource/Font/CourierStd.otf
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Resource/Font/CourierStd.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Resource/Font/MinionPro-Bold.otf
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Resource/Font/MinionPro-Bold.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Resource/Font/MinionPro-BoldIt.otf
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Resource/Font/MinionPro-BoldIt.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Resource/Font/MinionPro-It.otf
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Resource/Font/MinionPro-It.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Resource/Font/MinionPro-Regular.otf
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Resource/Font/MinionPro-Regular.otf
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Resource/Font/MyriadPro-Bold.otf
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Resource/Font/MyriadPro-Bold.otf
Resource
win10v2004-20240709-en
General
-
Target
Resource/CMap/Identity-V
-
Size
2KB
-
MD5
b5084cbf0ab0c3deac97e06cd3cb2ecc
-
SHA1
c32458cda1951cecffb69aa2f7e3a1ea8bf36251
-
SHA256
7483db44e4449a7ae232b30d6cba0d8746592757d0e91be82ec45b646c608807
-
SHA512
b15f65a2ab21121a4b815932a7e2dcafcf27f458bce532ae46bbcbd6b1134153027bf3e138fab42457a89bc892256b4796bbb9f1e3a85f9f4c5202015b56e3a5
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request149.220.183.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request25.140.123.92.in-addr.arpaIN PTRResponse25.140.123.92.in-addr.arpaIN PTRa92-123-140-25deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request73.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request43.58.199.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request232.168.11.51.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request147.142.123.92.in-addr.arpaIN PTRResponse147.142.123.92.in-addr.arpaIN PTRa92-123-142-147deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request240.143.123.92.in-addr.arpaIN PTRResponse240.143.123.92.in-addr.arpaIN PTRa92-123-143-240deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request205.47.74.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requesttse1.mm.bing.netIN AResponsetse1.mm.bing.netIN CNAMEmm-mm.bing.net.trafficmanager.netmm-mm.bing.net.trafficmanager.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.27.10ax-0001.ax-msedge.netIN A150.171.28.10
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340417880_1PRMSECURT9IUDN7Q&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340417880_1PRMSECURT9IUDN7Q&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 502729
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9D5857EC56AF4FC99F4DD251819EB38B Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340418534_1SATV94N425TECTRU&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340418534_1SATV94N425TECTRU&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 473680
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5801D1D976FC4E4CA8CA86F74F0485BA Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388072_1EV9TE4QEFANKPF6H&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388072_1EV9TE4QEFANKPF6H&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 660072
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BF2953D244394231B81E94B45D5FA3C0 Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388073_119U9LBW9PBGDFL1U&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388073_119U9LBW9PBGDFL1U&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 626306
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E60362F9D075452C8BF526D5AD2CB95D Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239317301060_1R4MHRP0LUJX09GMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239317301060_1R4MHRP0LUJX09GMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 665717
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CEF704A4AE054F5B9CD1C4C95BFC0E57 Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:23 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239317301493_1LBG6KMWNFIA52WWP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239317301493_1LBG6KMWNFIA52WWP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 532229
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F1676012E9EC4BDB84B3A8E77F49AE12 Ref B: LON04EDGE0920 Ref C: 2024-07-26T18:32:24Z
date: Fri, 26 Jul 2024 18:32:24 GMT
-
Remote address:8.8.8.8:53Request94.65.42.20.in-addr.arpaIN PTRResponse
-
1.2kB 6.9kB 15 13
-
150.171.27.10:443https://tse1.mm.bing.net/th?id=OADD2.10239317301493_1LBG6KMWNFIA52WWP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90tls, http2128.0kB 3.6MB 2621 2617
HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340417880_1PRMSECURT9IUDN7Q&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340418534_1SATV94N425TECTRU&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388072_1EV9TE4QEFANKPF6H&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388073_119U9LBW9PBGDFL1U&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239317301060_1R4MHRP0LUJX09GMU&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239317301493_1LBG6KMWNFIA52WWP&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Response
200 -
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
73 B 147 B 1 1
DNS Request
149.220.183.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
25.140.123.92.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
73.159.190.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
43.58.199.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
232.168.11.51.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
147.142.123.92.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
240.143.123.92.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
205.47.74.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
30.243.111.52.in-addr.arpa
-
62 B 170 B 1 1
DNS Request
tse1.mm.bing.net
DNS Response
150.171.27.10150.171.28.10
-
70 B 156 B 1 1
DNS Request
94.65.42.20.in-addr.arpa