Overview

overview

7

Static

static

3

HOF Ace Tu....5.exe

windows10-2004-x64

7

HOF Ace Tu....5.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    110s
  • max time network
    103s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250610-en
  • resource tags

    arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10/05/2026, 16:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    HOF Ace Tuner Setup V1.0.5.exe
  • Size 1.8MB
  • Sample260510-tkmsxaey7m
  • SHA256 1428d98c8988267f82786f9d05cdee2ccb8190bc288d50ea547aa3ffd62c7bc0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HOF Ace Tuner Setup V1.0.5.exe
    "C:\Users\Admin\AppData\Local\Temp\HOF Ace Tuner Setup V1.0.5.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Users\Admin\AppData\Local\Temp\is-K9C1B.tmp\HOF Ace Tuner Setup V1.0.5.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-K9C1B.tmp\HOF Ace Tuner Setup V1.0.5.tmp" /SL5="$50218,1483411,140288,C:\Users\Admin\AppData\Local\Temp\HOF Ace Tuner Setup V1.0.5.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4936
      • C:\Program Files (x86)\HOF Ace Tuner\OemDrv.exe
        "C:\Program Files (x86)\HOF Ace Tuner\OemDrv.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:880
  • C:\Program Files (x86)\HOF Ace Tuner\OemDrv.exe
    "C:\Program Files (x86)\HOF Ace Tuner\OemDrv.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:5972
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:5724

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OemDrv.exe
        • Path C:\Program Files (x86)\HOF Ace Tuner\OemDrv.exe
        • Size 2.6MB
        • SHA256 8d6513539af4918b8826624d3c7e2db74f3e1b3ab602b077d4314ded19f8be8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appico.ico
        • Path C:\Program Files (x86)\HOF Ace Tuner\appico.ico
        • Size 4KB
        • SHA256 dbc34e0d5c658493a8889ca2abc01be2d6092a69b7b343c7a3bad91862a03703
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cfg.ini
        • Path C:\Program Files (x86)\HOF Ace Tuner\cfg.ini
        • Size 4KB
        • SHA256 79b3e53887617f85cbcf48d47781280f02529e59125836085b37ee9f51203d8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        button_nr.png
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\button_nr.png
        • Size 158B
        • SHA256 509a388fca62bf4bfe21a6740e178bd860f586d7e80c1fb2cdba16388e5e194c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        button_ov.png
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\button_ov.png
        • Size 135B
        • SHA256 3cab3e04e18ad0cbc27251061802c15b5eded4a5e6d8f4204feabaf86c1506e2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        exit_nr.png
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\exit_nr.png
        • Size 360B
        • SHA256 e4c5dc258f9db0393452e1a6baf8e11b5156824461ffd596bd9ded8ea89d0ba3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        exit_ov.png
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\exit_ov.png
        • Size 387B
        • SHA256 ae6aac472319177697f7d18753b43668c4fa64cffb7eb65baf5cd6afbdb5abc1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        mak.skn
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\mak.skn
        • Size 520B
        • SHA256 873e00e3e088cbf4e049118b0c8364be4fc78d9e96f8957d2b52e28c999c9466
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        menu_nr.bmp
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\menu_nr.bmp
        • Size 18KB
        • SHA256 2e4d8bbca2c99df1048dfe4df6594c7558591770b60e8420e0a982657532289f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menu_ov.bmp
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\menu_ov.bmp
        • Size 18KB
        • SHA256 9857cb0a93445ac7536d14661cc4c382b7018eeb83be2379e0557a63f41b8e47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menusub_nr.bmp
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\menusub_nr.bmp
        • Size 18KB
        • SHA256 00d601067e0566ceb9329d934369cc793f3d5a21171a7eba09e183b41ebffb43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menusub_ov.bmp
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\menusub_ov.bmp
        • Size 18KB
        • SHA256 e54c8381ba5126cfa936aa9d0dabd1b4ac0167f1a0c451e6e40c8f48a7edeaad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msg_nr.png
        • Path C:\Program Files (x86)\HOF Ace Tuner\skins\msg_nr.png
        • Size 1KB
        • SHA256 89b98a7de53e7c83f2f25e169fd167183ef43c4e829a9aa30b2f62dbdc2d2c98
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        text.xml
        • Path C:\Program Files (x86)\HOF Ace Tuner\text.xml
        • Size 18KB
        • SHA256 4262558e536cbb137e7cca3f8040d6616c536083e746fe8ddcf167eda68fc1c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchHoverUnifiedTileModelCache.dat
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
        • Size 23KB
        • SHA256 384b5fdace2681db17f27c89a0083e39e2c2ec3a58fb160ed74b070bcf1a3c9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HOF Ace Tuner Setup V1.0.5.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\is-K9C1B.tmp\HOF Ace Tuner Setup V1.0.5.tmp
        • Size 1.1MB
        • SHA256 7ebecf18b4fc11d91658ab58c7e76beb21a08087d906df481b60ce6cd8eb9967
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitSetup.dll
        • Path C:\Users\Admin\AppData\Local\Temp\is-TBUDT.tmp\InitSetup.dll
        • Size 55KB
        • SHA256 72f5cfe575253eaff31e27ce8f70b4caaa079d2c42a4130515eecf7f0967115d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/880-284-0x0000000001210000-0x00000000012CB000-memory.dmp
        Download

        memory/880-282-0x0000000001210000-0x00000000012CB000-memory.dmp
        Download

        memory/1712-0-0x0000000000400000-0x000000000042E000-memory.dmp
        Download

        memory/1712-2-0x000000000041E000-0x000000000041F000-memory.dmp
        Download

        memory/1712-15-0x0000000000400000-0x000000000042E000-memory.dmp
        Download

        memory/1712-268-0x0000000000400000-0x000000000042E000-memory.dmp
        Download

        memory/4936-14-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-10-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-7-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-16-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-18-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-267-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/4936-262-0x0000000000400000-0x0000000000536000-memory.dmp
        Download

        memory/5972-287-0x0000000001090000-0x000000000114B000-memory.dmp
        Download