Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
296s -
max time network
299s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
-
submitted
06/01/2025, 12:09
General
-
Target
Content.zip
-
Size
14.1MB
-
MD5
74609826c6df328aab7aa0792c5bc5bd
-
SHA1
0e897a8609d97d3db591526e8d93127a708c2836
-
SHA256
c9909ba9760e4f20998099de1f61c64637a24a638b96a0a2f5aa430d9f61b802
-
SHA512
2097dc78af22d4277232a0b1b7f6bf55410bd11f7f8254ba18c1d0bc36a6cb0f63041024c98cd0f1e440e95aaf5be3b6e4216cc88a6d644d42ce941d869f6ce9
-
SSDEEP
196608:o2TmZJt8zMlZo/J29lQLU3PdEixtD7GK6D0IyWGV9QND2B9Yt/ycGEq/Mt4XRXrM:DTkoono2UadEifu1fyaw77EqIel7Pa/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Content.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4396,i,9196809988335597270,13533469875825522379,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3400,i,9196809988335597270,13533469875825522379,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:81⤵