Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
5gpg4win-4.3.1.exe
windows11-21h2-x64
7bin/plugin...er.dll
windows11-21h2-x64
3bin/plugin...er.dll
windows11-21h2-x64
3bin/plugin...rt.dll
windows11-21h2-x64
3bin/prints...rt.dll
windows11-21h2-x64
3bin/resolver.exe
windows11-21h2-x64
3bin/scute.dll
windows11-21h2-x64
3bin/scute.dll
windows11-21h2-x64
3bin/sha1sum.exe
windows11-21h2-x64
3bin/sha256sum.exe
windows11-21h2-x64
3bin/styles...le.dll
windows11-21h2-x64
3bin/zlib1.dll
windows11-21h2-x64
3bin_64/gpgex.dll
windows11-21h2-x64
7bin_64/gpgex.dll
windows11-21h2-x64
7bin_64/gpgme-json.exe
windows11-21h2-x64
1bin_64/gpg...wn.exe
windows11-21h2-x64
3bin_64/gpgol.dll
windows11-21h2-x64
7bin_64/gpgol.dll
windows11-21h2-x64
7bin_64/lib...-0.dll
windows11-21h2-x64
1bin_64/lib...-0.dll
windows11-21h2-x64
1bin_64/lib...-0.dll
windows11-21h2-x64
1bin_64/lib...-0.dll
windows11-21h2-x64
1bin_64/lib...11.dll
windows11-21h2-x64
1bin_64/lib...11.dll
windows11-21h2-x64
1bin_64/lib...-6.dll
windows11-21h2-x64
1bin_64/lib...-6.dll
windows11-21h2-x64
1bin_64/lib...-1.dll
windows11-21h2-x64
1share/doc/...e.html
windows11-21h2-x64
3share/doc/...n.html
windows11-21h2-x64
3share/doc/...ol.pdf
windows11-21h2-x64
3share/gpg4...de.pdf
windows11-21h2-x64
3share/gpg4...en.pdf
windows11-21h2-x64
3Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
04/09/2024, 17:43
Behavioral task
behavioral1
Sample
gpg4win-4.3.1.exe
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
bin/plugins/kf5/sonnet/sonnet_ispellchecker.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
bin/plugins/okular/generators/okularGenerator_poppler.dll
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
bin/plugins/okularpart.dll
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
bin/printsupport/windowsprintersupport.dll
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
bin/resolver.exe
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
bin/scute.dll
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
bin/scute.dll
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
bin/sha1sum.exe
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
bin/sha256sum.exe
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
bin/styles/qwindowsvistastyle.dll
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
bin/zlib1.dll
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
bin_64/gpgex.dll
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
bin_64/gpgex.dll
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
bin_64/gpgme-json.exe
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
bin_64/gpgme-w32spawn.exe
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
bin_64/gpgol.dll
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
bin_64/gpgol.dll
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
bin_64/libassuan-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
bin_64/libassuan-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
bin_64/libgpg-error-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
bin_64/libgpg-error-0.dll
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
bin_64/libgpgme-11.dll
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
bin_64/libgpgme-11.dll
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
bin_64/libgpgmepp-6.dll
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
bin_64/libgpgmepp-6.dll
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
bin_64/libwinpthread-1.dll
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
share/doc/gpgex/gpgex-de.html
Resource
win11-20240802-en
Behavioral task
behavioral29
Sample
share/doc/gpgex/gpgex-en.html
Resource
win11-20240802-en
Behavioral task
behavioral30
Sample
share/doc/gpgol/gpgol.pdf
Resource
win11-20240802-en
Behavioral task
behavioral31
Sample
share/gpg4win/gpg4win-compendium-de.pdf
Resource
win11-20240802-en
Behavioral task
behavioral32
Sample
share/gpg4win/gpg4win-compendium-en.pdf
Resource
win11-20240802-en
General
-
Target
bin/resolver.exe
-
Size
231KB
-
MD5
171c5648c202687345e5772f03c085c1
-
SHA1
f5b00c66c54d9fbeab4cb9d1a2c1e97bbe0e84b1
-
SHA256
3f88aaf4970547f2b93bec480c0bf375b8ec815a4f408fd146e08ca0b971f0b5
-
SHA512
3d200caa6cc8a93d570b576240fccdffff3d4b73f3b0e9c5e445e44e149f5fe4302a2bcfe762bbc2c53669acdefd5c3c8aefebf098f9942343af1ac62f4a2649
-
SSDEEP
3072:4Q41FKJnkgkOytb3Mi5eT+ORw+8kd4v6Ra3d/2rmgP0+c:451QJnaOW5e+ORck66Ra3durmJ+c
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language resolver.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1864 resolver.exe