41b8165de1e508ec34a889a371e0dd75d888f8530e20279af046871d25742ced

Analysis

max time kernel
127s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
02/02/2024, 07:55

Target

Plants.Vs.Zombies.GOTY/Plants Vs Zombies GOTY/Plants vs. Zombies/Core/PatchProgress.exe
Size

199KB
MD5

cb94d456e3eccb0f2d3aae2021707891
SHA1

42e7b22e4b2d771a857dd5c4e0537e8c56176b26
SHA256

e4c650c337ecdd69f37567febecbea7952b15c45cd4793406a5bda208659f6f1
SHA512

0c7847f94ae37b95f239963563cc69e444ed922f6546b104e3fe06ce5e1fe7f1af97e6ab40ad0c09d8c53cdee278149c89c5c288762660b479d879b4a85b083a
SSDEEP

6144:ZzSACuecleEZKs13QtUqaaqIWNf6SnC9vUwECifmm/AWOnuQ+/Y0wwUTbt:AACueW3Lv/Y0wwaB

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3788	PatchProgress.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3788 wrote to memory of 1252	3788	PatchProgress.exe	83
PID 3788 wrote to memory of 1252	3788	PatchProgress.exe	83
PID 3788 wrote to memory of 1252	3788	PatchProgress.exe	83

C:\Users\Admin\AppData\Local\Temp\Plants.Vs.Zombies.GOTY\Plants Vs Zombies GOTY\Plants vs. Zombies\Core\PatchProgress.exe
"C:\Users\Admin\AppData\Local\Temp\Plants.Vs.Zombies.GOTY\Plants Vs Zombies GOTY\Plants vs. Zombies\Core\PatchProgress.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3788
- C:\Users\Admin\AppData\Local\Temp\PLANTS~1.GOT\PLANTS~1\PLANTS~1.ZOM\Core\EACoreServer.exe
  "C:\Users\Admin\AppData\Local\Temp\PLANTS~1.GOT\PLANTS~1\PLANTS~1.ZOM\Core\EACoreServer.exe" -CoreServerId="Access3Test"
  2⤵
  PID:1252

C:\ProgramData\Electronic Arts\EA Core\logs\Access3Test.log

Filesize
1KB

MD5
220184504892c960996f49305997925e

SHA1
ed9f0d92b9010e7d7c08a772966eef00bd0de0b6

SHA256
4b2bb99b8ff8f53c138684f9d5c7be9d0277ca4d3e7586c781d0b71226bdc1e6

SHA512
47cf051d2898af551321a72058568ca8ce0e50ae257705965a83527647dde5b4c65ac952f30ddfd80b104d93a59160ccc75640a6b1cd7f43a23bea1e5ab3c527

Download Submit