Analysis
- user interaction
yes - max time kernel
46s - max time network
36s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
27/04/2026, 01:15
General
- Target PES HD Patch 2026 Fix v4.0.4.exe
- Size 43.9MB
- Sample260427-bl765aa14w
- SHA256 9a4ebd594fac1013d4dc331bc9d8d419dfde14799b104c174990f34651508d39
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 2 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
- Suspicious behavior: EnumeratesProcesses 54 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PES HD Patch 2026 Fix v4.0.4.exe"C:\Users\Admin\AppData\Local\Temp\PES HD Patch 2026 Fix v4.0.4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-8MVF2.tmp\PES HD Patch 2026 Fix v4.0.4.tmp"C:\Users\Admin\AppData\Local\Temp\is-8MVF2.tmp\PES HD Patch 2026 Fix v4.0.4.tmp" /SL5="$B0056,45082391,1075712,C:\Users\Admin\AppData\Local\Temp\PES HD Patch 2026 Fix v4.0.4.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
is-SKSNE.tmp
is-2CVPA.tmp
is-NPRSI.tmp
VclStylesInno.dll
PES HD Patch 2026 Fix v4.0.4.tmp
memory/3752-0-0x0000000000400000-0x0000000000515000-memory.dmp
memory/3752-86-0x0000000000400000-0x0000000000515000-memory.dmp
memory/4900-70-0x00000000045C0000-0x00000000045C1000-memory.dmp
memory/4900-63-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-17-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-16-0x0000000003700000-0x0000000003701000-memory.dmp
memory/4900-14-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-13-0x00000000036F0000-0x00000000036F1000-memory.dmp
memory/4900-23-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-27-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-36-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-39-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-38-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-37-0x0000000003770000-0x0000000003771000-memory.dmp
memory/4900-35-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-34-0x0000000003760000-0x0000000003761000-memory.dmp
memory/4900-33-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-32-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-31-0x0000000003750000-0x0000000003751000-memory.dmp
memory/4900-30-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-29-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-28-0x0000000003740000-0x0000000003741000-memory.dmp
memory/4900-26-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-25-0x0000000003730000-0x0000000003731000-memory.dmp
memory/4900-24-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-22-0x0000000003720000-0x0000000003721000-memory.dmp
memory/4900-21-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-20-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-19-0x0000000003710000-0x0000000003711000-memory.dmp
memory/4900-18-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-40-0x0000000003780000-0x0000000003781000-memory.dmp
memory/4900-42-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-41-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-66-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-72-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-76-0x00000000042AE000-0x00000000042AF000-memory.dmp
memory/4900-71-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-11-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-69-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-68-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-15-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-67-0x00000000045B0000-0x00000000045B1000-memory.dmp
memory/4900-59-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-64-0x00000000045A0000-0x00000000045A1000-memory.dmp
memory/4900-62-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-61-0x0000000004590000-0x0000000004591000-memory.dmp
memory/4900-60-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-65-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-58-0x0000000004580000-0x0000000004581000-memory.dmp
memory/4900-56-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-55-0x0000000004570000-0x0000000004571000-memory.dmp
memory/4900-54-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-53-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-52-0x0000000004560000-0x0000000004561000-memory.dmp
memory/4900-51-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-50-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-49-0x0000000004550000-0x0000000004551000-memory.dmp
memory/4900-48-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-47-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-46-0x0000000004540000-0x0000000004541000-memory.dmp
memory/4900-45-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-57-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-44-0x0000000003590000-0x00000000036D0000-memory.dmp
memory/4900-43-0x0000000004530000-0x0000000004531000-memory.dmp
memory/4900-77-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-78-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-79-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-80-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-81-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-82-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-83-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-84-0x0000000000E90000-0x0000000000E91000-memory.dmp
memory/4900-85-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-87-0x0000000000400000-0x0000000000748000-memory.dmp
memory/4900-90-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-5-0x0000000000E90000-0x0000000000E91000-memory.dmp
memory/4900-91-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-92-0x0000000004110000-0x000000000442A000-memory.dmp
memory/4900-223-0x0000000004110000-0x000000000442A000-memory.dmp