Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3OBS-Studio...er.exe
windows10-2004-x64
data/obs-p...64.exe
windows10-2004-x64
1data/obs-s...on.dll
windows10-2004-x64
1data/obs-s...ua.dll
windows10-2004-x64
1data/obs-s...hon.py
windows10-2004-x64
3obs-plugin...ja.dll
windows10-2004-x64
1obs-plugin...lf.dll
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...ui.dll
windows10-2004-x64
1obs-plugin...nk.dll
windows10-2004-x64
1obs-plugin...ls.dll
windows10-2004-x64
1obs-plugin...ce.dll
windows10-2004-x64
1obs-plugin...GL.dll
windows10-2004-x64
1obs-plugin...ge.exe
windows10-2004-x64
1obs-plugin...er.dll
windows10-2004-x64
1obs-plugin...eg.dll
windows10-2004-x64
1obs-plugin...rs.dll
windows10-2004-x64
1obs-plugin...ts.dll
windows10-2004-x64
1obs-plugin...11.dll
windows10-2004-x64
1obs-plugin...xt.dll
windows10-2004-x64
1obs-plugin...ns.dll
windows10-2004-x64
1obs-plugin...st.dll
windows10-2004-x64
1obs-plugin...tc.dll
windows10-2004-x64
1obs-plugin...et.dll
windows10-2004-x64
1obs-plugin...64.dll
windows10-2004-x64
1obs-plugin...es.dll
windows10-2004-x64
1obs-plugin...e2.dll
windows10-2004-x64
1obs-plugin...eo.dll
windows10-2004-x64
1obs-plugin...re.dll
windows10-2004-x64
1obs-plugin...ow.dll
windows10-2004-x64
1obs-plugin...pi.dll
windows10-2004-x64
1Analysis
-
max time kernel
1355s -
max time network
1151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2024, 20:59
Static task
static1
Behavioral task
behavioral1
Sample
OBS-Studio-30.2.2-Windows-Installer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
data/obs-plugins/win-capture/inject-helper64.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
data/obs-scripting/64bit/_obspython.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
data/obs-scripting/64bit/obslua.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
data/obs-scripting/64bit/obspython.py
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
obs-plugins/64bit/aja.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
obs-plugins/64bit/chrome_elf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
obs-plugins/64bit/coreaudio-encoder.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
obs-plugins/64bit/decklink-captions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
obs-plugins/64bit/decklink-output-ui.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
obs-plugins/64bit/decklink.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
obs-plugins/64bit/frontend-tools.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
obs-plugins/64bit/image-source.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
obs-plugins/64bit/libEGL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
obs-plugins/64bit/obs-browser-page.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
obs-plugins/64bit/obs-browser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
obs-plugins/64bit/obs-ffmpeg.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral18
Sample
obs-plugins/64bit/obs-filters.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
obs-plugins/64bit/obs-outputs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral20
Sample
obs-plugins/64bit/obs-qsv11.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
obs-plugins/64bit/obs-text.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral22
Sample
obs-plugins/64bit/obs-transitions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
obs-plugins/64bit/obs-vst.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral24
Sample
obs-plugins/64bit/obs-webrtc.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
obs-plugins/64bit/obs-websocket.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral26
Sample
obs-plugins/64bit/obs-x264.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
obs-plugins/64bit/rtmp-services.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
obs-plugins/64bit/text-freetype2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
obs-plugins/64bit/vlc-video.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral30
Sample
obs-plugins/64bit/win-capture.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
obs-plugins/64bit/win-dshow.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral32
Sample
obs-plugins/64bit/win-wasapi.dll
Resource
win10v2004-20240802-en
General
-
Target
data/obs-plugins/win-capture/inject-helper64.exe
-
Size
136KB
-
MD5
ef7477532e0c8e9f1979c3ae1d8c8c9b
-
SHA1
5abd41c19aee32b9167611dbe8f786c548aaefbb
-
SHA256
6ae58fd64650b6db2ee776cae2e22498df3ea4ec9cd12025d8d96ec0e19380c8
-
SHA512
f297d99ad4e396bab9e1ec5fd6f51cd291a441784a955d6e527e444652eb4edf6ede98edb2b331bea1f5e714d40c6c09b1cf338a3dee18540364dfe65143d92e
-
SSDEEP
3072:HZpMpWVQ3AOZsdwXrisSkmtC0lp1J9NaOkp895:5yWVQ3Ag+wXakmtC0/JdT
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1564 inject-helper64.exe