268e4133229d3071e4b55c701c5ab3bea4ebf240c8827fdc790edb6b1b2a268c

Login
Reports

Overview

overview

Static

static

PC_PVZ-Fus....1.zip

windows10-2004-x64

PC_PVZ-Fus....1.zip

windows11-ltsc_2024-x64

GameAssembly.dll

windows10-2004-x64

GameAssembly.dll

windows11-ltsc_2024-x64

PlantsVsZombiesRH.exe

windows10-2004-x64

PlantsVsZombiesRH.exe

windows11-ltsc_2024-x64

PlantsVsZo...ed.dll

windows10-2004-x64

PlantsVsZo...ed.dll

windows11-ltsc_2024-x64

PlantsVsZo...ources

windows10-2004-x64

PlantsVsZo...ources

windows11-ltsc_2024-x64

PlantsVsZo...s.json

windows10-2004-x64

PlantsVsZo...s.json

windows11-ltsc_2024-x64

PlantsVsZo...s.json

windows10-2004-x64

PlantsVsZo...s.json

windows11-ltsc_2024-x64

PlantsVsZo...p.info

windows10-2004-x64

PlantsVsZo...p.info

windows11-ltsc_2024-x64

PlantsVsZo...config

windows10-2004-x64

PlantsVsZo...config

windows11-ltsc_2024-x64

PlantsVsZo...nity3d

windows10-2004-x64

PlantsVsZo...nity3d

windows11-ltsc_2024-x64

PlantsVsZo...ta.dat

windows10-2004-x64

PlantsVsZo...ta.dat

windows11-ltsc_2024-x64

PlantsVsZo...es.dat

windows10-2004-x64

PlantsVsZo...es.dat

windows11-ltsc_2024-x64

PlantsVsZo...es.dat

windows10-2004-x64

PlantsVsZo...es.dat

windows11-ltsc_2024-x64

PlantsVsZo...source

windows10-2004-x64

PlantsVsZo...source

windows11-ltsc_2024-x64

PlantsVsZo...source

windows10-2004-x64

PlantsVsZo...source

windows11-ltsc_2024-x64

UnityCrash...64.exe

windows10-2004-x64

UnityCrash...64.exe

windows11-ltsc_2024-x64

Analysis

max time kernel
149s
max time network
198s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 23:14

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

PC_PVZ-Fusion-3.8.1.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

PC_PVZ-Fusion-3.8.1.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

GameAssembly.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

GameAssembly.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

PlantsVsZombiesRH.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral6

Sample

PlantsVsZombiesRH.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

PlantsVsZombiesRH_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

PlantsVsZombiesRH_Data/Plugins/x86_64/lib_burst_generated.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

PlantsVsZombiesRH_Data/Resources/unity default resources

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

PlantsVsZombiesRH_Data/Resources/unity default resources

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

PlantsVsZombiesRH_Data/RuntimeInitializeOnLoads.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

PlantsVsZombiesRH_Data/RuntimeInitializeOnLoads.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

PlantsVsZombiesRH_Data/ScriptingAssemblies.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

PlantsVsZombiesRH_Data/ScriptingAssemblies.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

PlantsVsZombiesRH_Data/app.info

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

PlantsVsZombiesRH_Data/app.info

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

PlantsVsZombiesRH_Data/boot.config

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

PlantsVsZombiesRH_Data/boot.config

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

PlantsVsZombiesRH_Data/data.unity3d

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

PlantsVsZombiesRH_Data/data.unity3d

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Metadata/global-metadata.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Metadata/global-metadata.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Resources/0Harmony.dll-resources.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Resources/0Harmony.dll-resources.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

PlantsVsZombiesRH_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

PlantsVsZombiesRH_Data/resources.resource

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

PlantsVsZombiesRH_Data/resources.resource

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

PlantsVsZombiesRH_Data/sharedassets0.resource

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

PlantsVsZombiesRH_Data/sharedassets0.resource

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

UnityCrashHandler64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

UnityCrashHandler64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
PlantsVsZombiesRH.exe
Size 651KB
Sample260807-28aggsdn9s
SHA256 268e4133229d3071e4b55c701c5ab3bea4ebf240c8827fdc790edb6b1b2a268c
MD5 a2bd3834c56d929704252d458eceb48d
SHA1 cf1842d3a1f51e79814061aec9d46528ce01f835
SHA512 50a98dbdfc1c9da9005bf556c03dced2ff332a9150c62bb6cc13a9092fc4bf1f3a02f4abe77a84578801598d1e44cdf76f3b9f640580eba492903753617a402d
SSDEEP 12288:ZH744aOD8nsmV2eCczU3CAX+dwk7xkKwsBrO:59aOQFwf
TLSH
T17FE495C7B1F1D8C5DE11B938C4E4ADAD8725DEAB9E0F241E08217D9534E913C4AADC3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	200	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	200	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1228	PlantsVsZombiesRH.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1228 wrote to memory of 5380	1228	PlantsVsZombiesRH.exe	88

Processes

C:\Users\Admin\AppData\Local\Temp\PlantsVsZombiesRH.exe
"C:\Users\Admin\AppData\Local\Temp\PlantsVsZombiesRH.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1228
- C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe
  "C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 1228 2713105338368
  2⤵
  PID:5380

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004D8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:200

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads