Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3xd-AntiSpy_modern.zip
windows11-21h2-x64
1Localizati...ry.dll
windows11-21h2-x64
1Newtonsoft.Json.dll
windows11-21h2-x64
1PluginInterface.dll
windows11-21h2-x64
1lang.json
windows11-21h2-x64
3plugins/Cl...e.json
windows11-21h2-x64
3plugins/Fi...y.json
windows11-21h2-x64
3plugins/Pl...er.dll
windows11-21h2-x64
1plugins/Pl...er.ps1
windows11-21h2-x64
3plugins/Pl...er.dll
windows11-21h2-x64
1plugins/Pl...r.json
windows11-21h2-x64
3plugins/Re...er.ps1
windows11-21h2-x64
8plugins/Sn...t.json
windows11-21h2-x64
3plugins/Un...ve.ps1
windows11-21h2-x64
8plugins/Us...e.json
windows11-21h2-x64
3plugins/Us...l.json
windows11-21h2-x64
3xd-AntiSpy.exe
windows11-21h2-x64
xd-AntiSpy.png
windows11-21h2-x64
3Analysis
-
max time kernel
428s -
max time network
430s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
12/08/2024, 07:15
Static task
static1
Behavioral task
behavioral1
Sample
xd-AntiSpy_modern.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
LocalizationLibrary.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
PluginInterface.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
lang.json
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
plugins/Clear Icon Cache.json
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
plugins/File Extensions Visibility.json
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
plugins/PluginButler.dll
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
plugins/PluginButler.ps1
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
plugins/PluginDebloater.dll
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
plugins/PluginDebloater.json
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
plugins/Restart Explorer.ps1
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
plugins/Snap Assist Flyout.json
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
plugins/Uninstall OneDrive.ps1
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
plugins/Use light theme.json
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
plugins/User Account Control.json
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
xd-AntiSpy.exe
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
xd-AntiSpy.png
Resource
win11-20240802-en
General
-
Target
xd-AntiSpy.png
-
Size
31KB
-
MD5
d2a0f93e1dcf29d9ad11433a6538dcae
-
SHA1
ad1f6d104a49fa490cc1a1303c19cbbfea4b7411
-
SHA256
e1009fb19bc8a891aa1989dd59bfa6c265b66cfa58d9083ff6e2b15d9af32f48
-
SHA512
e4f62f78c2a59ce7c03e3e93b18f65e8ac081876548636c9d387733fab16a9714179efed723c2b7817c1453ddb8edd2ca8a1f6c039b23d7dc2df06718f6cc50f
-
SSDEEP
768:J9L8aPIEsFGbjnwsiQufajx0yMvR14hqjsd:TLFsAnzufWqR14qm
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).