Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Perky And ...LC.exe
windows7-x64
1Perky And ...LC.exe
windows10-2004-x64
1Perky And ...on.exe
windows7-x64
3Perky And ...on.exe
windows10-2004-x64
3Perky And ....5.exe
windows7-x64
7Perky And ....5.exe
windows10-2004-x64
7$PLUGINSDI...md.dll
windows7-x64
3$PLUGINSDI...md.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Perky And ...es.cmd
windows7-x64
7Perky And ...es.cmd
windows10-2004-x64
7Perky And ...es.bat
windows7-x64
1Perky And ...es.bat
windows10-2004-x64
1Perky And ...rs.ps1
windows7-x64
3Perky And ...rs.ps1
windows10-2004-x64
3Perky And ...ws.ps1
windows7-x64
3Perky And ...ws.ps1
windows10-2004-x64
7Perky And ...ut.lnk
windows7-x64
3Perky And ...ut.lnk
windows10-2004-x64
3Perky And ...na.ps1
windows7-x64
3Perky And ...na.ps1
windows10-2004-x64
3Perky And ...ew.ps1
windows7-x64
3Perky And ...ew.ps1
windows10-2004-x64
3Perky And ...na.ps1
windows7-x64
3Perky And ...na.ps1
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17/09/2024, 15:50
Static task
static1
Behavioral task
behavioral1
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/ISLC/Intelligent standby list cleaner ISLC.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/ISLC/Intelligent standby list cleaner ISLC.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/TimerResolution/TimerResolution.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/TimerResolution/TimerResolution.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/XMouseButtonControlSetup.2.20.5.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/XMouseButtonControlSetup.2.20.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Log Files.cmd
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Log Files.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Temporary Files.bat
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Temporary Files.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Clear Last Used Files and Folders.ps1
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Clear Last Used Files and Folders.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloat Windows.ps1
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloat Windows.ps1
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloater - Shortcut.lnk
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloater - Shortcut.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Cortana.ps1
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Cortana.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Last Used Files and Folders View.ps1
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Last Used Files and Folders View.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Enable Cortana.ps1
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Enable Cortana.ps1
Resource
win10v2004-20240802-en
General
-
Target
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloat Windows.ps1
-
Size
3KB
-
MD5
fe027363edd3aa71c6a4ae0ecb7ceaae
-
SHA1
2061b9af054ca1f1903797b270439db656d54dff
-
SHA256
2152bdd73176e7152a02b79170fe193e0f036b91373f8781937df67247561de0
-
SHA512
180d0305529edfbe8b18f1627ba3a1212605c703cdd574dfb7dde020209a0fd049effa873aaa9912526501a66ae2fee5d5c9e47aee624b3962d21e6582f105af
Malware Config
Signatures
-
pid Process 2460 powershell.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2460 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2460 powershell.exe
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Perky And Kanvs Optimization V1\Debloater\Individual Scripts\Debloat Windows.ps1"1⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2460