Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08/03/2024, 02:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
EldenRingFPSUnlockAndMore_v1.1.0.0.exe
-
Size
393KB
-
MD5
1fffda8835e3673aadb418b0fb2cf935
-
SHA1
de5726a86abd86e80b123f5425857d7ce9b242f0
-
SHA256
15ee24284cd11c49da02eb2ad1e55bba6c70d5d2ebe85859079872edaffd5a0c
-
SHA512
6bbd74eca660a80d3375b939cbbc9bcc0a287942e8594129fadf46c12aaa8a1798242966faaca57fc6d79ab1ea6565e23ca652967b24747e61cd942993fde105
-
SSDEEP
6144:qIw8okGbaLIT8yB2oFpgNTWOTsMFxIT8yB2QFpgvTWOTpMK:68UT8yBfLgNbFFiT8yBNLgvbuK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3420 EldenRingFPSUnlockAndMore_v1.1.0.0.exe