Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Perky And ...LC.exe
windows7-x64
1Perky And ...LC.exe
windows10-2004-x64
1Perky And ...on.exe
windows7-x64
3Perky And ...on.exe
windows10-2004-x64
3Perky And ....5.exe
windows7-x64
7Perky And ....5.exe
windows10-2004-x64
7$PLUGINSDI...md.dll
windows7-x64
3$PLUGINSDI...md.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Perky And ...es.cmd
windows7-x64
7Perky And ...es.cmd
windows10-2004-x64
7Perky And ...es.bat
windows7-x64
1Perky And ...es.bat
windows10-2004-x64
1Perky And ...rs.ps1
windows7-x64
3Perky And ...rs.ps1
windows10-2004-x64
3Perky And ...ws.ps1
windows7-x64
3Perky And ...ws.ps1
windows10-2004-x64
7Perky And ...ut.lnk
windows7-x64
3Perky And ...ut.lnk
windows10-2004-x64
3Perky And ...na.ps1
windows7-x64
3Perky And ...na.ps1
windows10-2004-x64
3Perky And ...ew.ps1
windows7-x64
3Perky And ...ew.ps1
windows10-2004-x64
3Perky And ...na.ps1
windows7-x64
3Perky And ...na.ps1
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
17/09/2024, 15:50
Static task
static1
Behavioral task
behavioral1
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/ISLC/Intelligent standby list cleaner ISLC.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/ISLC/Intelligent standby list cleaner ISLC.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/TimerResolution/TimerResolution.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/TimerResolution/TimerResolution.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/XMouseButtonControlSetup.2.20.5.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Perky And Kanvs Optimization V1/0 Mouse Delay + Input Delay/XMouseButtonControlSetup.2.20.5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ExecCmd.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ShellExecAsUser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Log Files.cmd
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Log Files.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Temporary Files.bat
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Perky And Kanvs Optimization V1/Cleaner/Clean Temporary Files.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Clear Last Used Files and Folders.ps1
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Clear Last Used Files and Folders.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloat Windows.ps1
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloat Windows.ps1
Resource
win10v2004-20240910-en
Behavioral task
behavioral25
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloater - Shortcut.lnk
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Debloater - Shortcut.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Cortana.ps1
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Cortana.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Last Used Files and Folders View.ps1
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Last Used Files and Folders View.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Enable Cortana.ps1
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Enable Cortana.ps1
Resource
win10v2004-20240802-en
General
-
Target
Perky And Kanvs Optimization V1/Debloater/Individual Scripts/Disable Cortana.ps1
-
Size
659B
-
MD5
6323e777a8add8e0c94bf73b29c7e493
-
SHA1
0a19c7a21c7f66ab97c3582fbf54c8627b9c5c19
-
SHA256
5f094ae62d81cd7b7a049d3193802ccf58cbdc738df285c95ff5cbb73b4876d7
-
SHA512
67a6c08278a06c2c2dcc24f2a2d2dae82372f9c369a82892fb2cb6f88fe4ef48a12006d530b199748fd7ad81b2aabafd59db7cabc8f0c9b18be967f78a1655f5
Malware Config
Signatures
-
pid Process 2484 powershell.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2484 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2484 powershell.exe
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File "C:\Users\Admin\AppData\Local\Temp\Perky And Kanvs Optimization V1\Debloater\Individual Scripts\Disable Cortana.ps1"1⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2484