Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

CefSharp.B...re.dll

windows10-2004-x64

1

CefSharp.B...ss.exe

windows10-2004-x64

1

CefSharp.C...me.dll

windows10-2004-x64

1

CefSharp.Core.dll

windows10-2004-x64

1

CefSharp.Wpf.dll

windows10-2004-x64

1

CefSharp.dll

windows10-2004-x64

1

Celery.exe

windows10-2004-x64

7

Microsoft....es.dll

windows10-2004-x64

1

Microsoft....ns.dll

windows10-2004-x64

1

Microsoft....ns.dll

windows10-2004-x64

1

Microsoft....on.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

System.Run...fe.dll

windows10-2004-x64

1

System.Thr...ns.dll

windows10-2004-x64

1

System.Win...ty.dll

windows10-2004-x64

1

chrome_elf.dll

windows10-2004-x64

1

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

libcef.dll

windows10-2004-x64

1

locales/en-US.ps1

windows10-2004-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/08/2024, 21:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Microsoft.Expression.Interactions.dll

  • Size

    89KB

  • MD5

    6a3b9e46c41e42e7b8e1479468d892af

  • SHA1

    e31c05ae685e51d07808b1dd24ceced9d299ed81

  • SHA256

    f3b14defbd05493b8573016b08b86e5b5d53b486b0457fd75f67bf8bff04be38

  • SHA512

    d6416204875ce732edac51e36f267c9cca52f60ba79cd981b388988e435bd1cce87f972a9e90be4fd9a7fd25cb316293f938f45fb645f25a4f62b980a37236b7

  • SSDEEP

    1536:Srf5GttgxHXEuRmG5rtkGY4CEmWAxXSSYhhS98ca2Wvsd65FJDlGWwkEy:a5GttWHXEUx5r65LxXshk8JDIWP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Microsoft.Expression.Interactions.dll,#1
    1⤵
      PID:4872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads