Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
24/11/2022, 05:54
Static task
static1
Behavioral task
behavioral1
Sample
The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
General
-
Target
The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe
-
Size
632KB
-
MD5
5208d8882580c4b2a1cb2e52f2ccf52f
-
SHA1
ce933e90d0e7ef2b008b88ac99931f4a563f487f
-
SHA256
33d4280ecd1fc2b4f123f314c34fef3552f614cce9dcb8eb717642183c408e13
-
SHA512
b5770e212a7bab7b0dabc8943455353a85f8588d02836b00140e3e8c26020c31124bc07d34711231fe7e2e4b72f7fa208154482775b4280315fba1b4256a801e
-
SSDEEP
12288:VLL5DSytkLwxwzqBeMCBF8ZyYF/CVvJJyL5DSyt:VhDSEqznr8ZTFqFmDS
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 3496 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3496 AUDIODG.EXE Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: SeIncBasePriorityPrivilege 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe Token: 33 2804 The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\The Witcher 2 v.2.0.8014.57047 Plus 7 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2804
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2cc 0x3c41⤵
- Suspicious use of AdjustPrivilegeToken
PID:3496