Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
615s -
max time network
1586s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
03/09/2024, 16:52 UTC
General
-
Target
Content-Warning-FixOnly.V4/Custom.dll
-
Size
2.1MB
-
MD5
310120290f8cc047681f8a348ab9d851
-
SHA1
478b3dd155c06be474efde3ae3ffb86450f78a6d
-
SHA256
3ff601e0ad8c73ad433f158627fda8d58c52a983907f05ff0d83933230becf56
-
SHA512
c381b20d3b8fcb19a2b483f47db11401b2196c8cfef12cb613bf60513b7a1e15d4b3150a56da8516a708f845889a353607306d2751b00f5365b622d5b4422854
-
SSDEEP
24576:1uILGblwKgf70b6sAUmLuBUJ/KE/dFdy8goDSGIt6:1wlS0bBmQKRynqS
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Content-Warning-FixOnly.V4\Custom.dll,#11⤵
Network
-
DNS13.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse -
DNS198.111.78.13.in-addr.arpaRemote address:8.8.8.8:53Request198.111.78.13.in-addr.arpaIN PTRResponse
-
DNS73.144.22.2.in-addr.arpaRemote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
DNS81.144.22.2.in-addr.arpaRemote address:8.8.8.8:53Request81.144.22.2.in-addr.arpaIN PTRResponse81.144.22.2.in-addr.arpaIN PTRa2-22-144-81deploystaticakamaitechnologiescom
-
DNS57.110.18.2.in-addr.arpaRemote address:8.8.8.8:53Request57.110.18.2.in-addr.arpaIN PTRResponse57.110.18.2.in-addr.arpaIN PTRa2-18-110-57deploystaticakamaitechnologiescom
-
52.142.223.178:80
-
8.8.8.8:5313.227.111.52.in-addr.arpadns
DNS Request
13.227.111.52.in-addr.arpa
-
8.8.8.8:53198.111.78.13.in-addr.arpadns
DNS Request
198.111.78.13.in-addr.arpa
-
8.8.8.8:5373.144.22.2.in-addr.arpadns
DNS Request
73.144.22.2.in-addr.arpa
-
8.8.8.8:5381.144.22.2.in-addr.arpadns
DNS Request
81.144.22.2.in-addr.arpa
-
8.8.8.8:5357.110.18.2.in-addr.arpadns
DNS Request
57.110.18.2.in-addr.arpa