Analysis
- max time kernel
150s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 18:15
General
- Target The Witcher 3 Wild Hunt v1.0-v4.0 22 Trainer.exe
- Size 1.8MB
- Sample260804-wwcs7avscs
- SHA256 a9e2eb82a9248f900aa399ac902d78778d5391457c95e202f0e4331bf9b22b37
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\The Witcher 3 Wild Hunt v1.0-v4.0 22 Trainer.exe"C:\Users\Admin\AppData\Local\Temp\The Witcher 3 Wild Hunt v1.0-v4.0 22 Trainer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
FLiNGTrainer.tmp
memory/788-16-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-18-0x00000204C9980000-0x00000204C998E000-memory.dmp
memory/788-9-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-0-0x00007FFB859DF000-0x00007FFB859E0000-memory.dmp
memory/788-11-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-12-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-13-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-14-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-3-0x00000204ABFD0000-0x00000204AC002000-memory.dmp
memory/788-15-0x00000204AC740000-0x00000204AC748000-memory.dmp
memory/788-10-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-17-0x00000204C99C0000-0x00000204C99FE000-memory.dmp
memory/788-22-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-23-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-24-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-27-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-28-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-29-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp
memory/788-30-0x00007FFB85850000-0x00007FFB861F4000-memory.dmp