Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3NoRiskClie...up.exe
windows10-2004-x64
7$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$TEMP/Micr...up.exe
windows10-2004-x64
6NoRiskClient.exe
windows10-2004-x64
1uninstall.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3Analysis
-
max time kernel
1355s -
max time network
1143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-de -
resource tags
arch:x64arch:x86image:win10v2004-20240802-delocale:de-deos:windows10-2004-x64systemwindows -
submitted
06/08/2024, 19:46
Static task
static1
Behavioral task
behavioral1
Sample
NoRiskClient-Windows-setup.exe
Resource
win10v2004-20240802-de
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral6
Sample
$TEMP/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20240802-de
Behavioral task
behavioral7
Sample
NoRiskClient.exe
Resource
win10v2004-20240802-de
Behavioral task
behavioral8
Sample
uninstall.exe
Resource
win10v2004-20240802-de
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-de
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240802-de
General
-
Target
NoRiskClient.exe
-
Size
23.8MB
-
MD5
10a7cf5b525637983d4327cad60d1ab4
-
SHA1
6e2e48d904e750758be8d068935fe53364899956
-
SHA256
980ce45fddd40bba1427efa5f3c98c18e3d4dfc798898dddaa3f932e0bfbc96e
-
SHA512
80ed73b13e7d1c4e34c7e9630e7c2bad1db80aadd1d6a8f0c499850d1dbd379c57c3dfb8ec1f33222768c6d2fc80301c6984be4f44c304c7a0bccade1651eeb8
-
SSDEEP
196608:pQ0foIt0S2I5LRUpB0h9EmJiJtuEQHrIb80uth/b:Rpt0S2I90B03XEQkb80Exb
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3636 NoRiskClient.exe