e9013a37c6ee9bb4bee376c5d93c58957dab859c938afc69198b5143250add3c

Analysis

max time kernel
667s
max time network
684s
platform
windows11-21h2_x64
resource
win11-20250217-en
resource tags

arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
submitted
13/03/2025, 01:50

Target

Xeno-v1.1.55/api-ms-win-crt-stdio-l1-1-0.dll
Size

17KB
MD5

429c26ed27a026442f89c95ff16ce8c2
SHA1

69ed09faae00a980c296546c9b5e6a8d5f978439
SHA256

2a466648affd3d51b944f563bb65046a3da91006a0d90fb2c0b123487a1fc1b3
SHA512

04641164d9e1eb3183db0c406583626011dfe2b2574551c0ac466ebf44165afcd7d8faf356b8268b4fc9a54db20de010a4e4293594ad2e605950aea65636f4e5
SSDEEP

192:BpPLNPjFuWYFxEpah7WphWRD1S8f4DBQABJ+SiLuEbNEdiqnajVCpEbOg4:B19OFVh7WphWRD1IDBRJ5iLbnlxkEf

Score

1^/10

Suspicious behavior: EnumeratesProcesses 6 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Xeno-v1.1.55\api-ms-win-crt-stdio-l1-1-0.dll,#1
1⤵
PID:1092

C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
"C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3112

memory/3112-0-0x00007FFC8C0D3000-0x00007FFC8C0D5000-memory.dmp

Filesize
8KB

Download
memory/3112-3-0x0000022F45F60000-0x0000022F45F68000-memory.dmp

Filesize
32KB

Download
memory/3112-2-0x0000022F45F30000-0x0000022F45F3A000-memory.dmp

Filesize
40KB

Download
memory/3112-1-0x0000022F2BCC0000-0x0000022F2BCEC000-memory.dmp

Filesize
176KB

Download
memory/3112-5-0x0000022F476B0000-0x0000022F47758000-memory.dmp

Filesize
672KB

Download
memory/3112-6-0x0000022F47340000-0x0000022F47362000-memory.dmp

Filesize
136KB

Download
memory/3112-7-0x0000022F473A0000-0x0000022F473B4000-memory.dmp

Filesize
80KB

Download