Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 02:15 UTC

General

  • Target

    EldenRingFPSUnlockAndMore_v1.1.0.0.exe

  • Size

    393KB

  • MD5

    1fffda8835e3673aadb418b0fb2cf935

  • SHA1

    de5726a86abd86e80b123f5425857d7ce9b242f0

  • SHA256

    15ee24284cd11c49da02eb2ad1e55bba6c70d5d2ebe85859079872edaffd5a0c

  • SHA512

    6bbd74eca660a80d3375b939cbbc9bcc0a287942e8594129fadf46c12aaa8a1798242966faaca57fc6d79ab1ea6565e23ca652967b24747e61cd942993fde105

  • SSDEEP

    6144:qIw8okGbaLIT8yB2oFpgNTWOTsMFxIT8yB2QFpgvTWOTpMK:68UT8yBfLgNbFFiT8yBNLgvbuK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\EldenRingFPSUnlockAndMore_v1.1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\EldenRingFPSUnlockAndMore_v1.1.0.0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2088-0-0x000000013FC90000-0x000000013FCF6000-memory.dmp

    Filesize

    408KB

  • memory/2088-1-0x000007FEF5BB0000-0x000007FEF659C000-memory.dmp

    Filesize

    9.9MB

  • memory/2088-2-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

  • memory/2088-4-0x00000000008D0000-0x00000000008DA000-memory.dmp

    Filesize

    40KB

  • memory/2088-3-0x00000000008D0000-0x00000000008DA000-memory.dmp

    Filesize

    40KB

  • memory/2088-5-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

  • memory/2088-6-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

  • memory/2088-7-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

  • memory/2088-8-0x000007FEF5BB0000-0x000007FEF659C000-memory.dmp

    Filesize

    9.9MB

  • memory/2088-9-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

  • memory/2088-10-0x00000000008D0000-0x00000000008DA000-memory.dmp

    Filesize

    40KB

  • memory/2088-11-0x00000000008D0000-0x00000000008DA000-memory.dmp

    Filesize

    40KB

  • memory/2088-12-0x000000001B650000-0x000000001B6D0000-memory.dmp

    Filesize

    512KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.