Overview
overview
7Static
static
5PDF-XChang...4).zip
windows10-2004-x64
1PDF-XChang...4).zip
windows11-ltsc_2024-x64
1PDF-XChang...64.dll
windows10-2004-x64
7PDF-XChang...64.dll
windows10-2004-x64
7PDF-XChang...er.exe
windows10-2004-x64
1PDF-XChang...rL.exe
windows10-2004-x64
1PDF-XChang...86.exe
windows10-2004-x64
3PDF-XChang...er.exe
windows10-2004-x64
3PDF-XChang...rL.exe
windows10-2004-x64
3PDF-XChang...64.msi
windows10-2004-x64
7PDF-XChang...64.msi
windows11-ltsc_2024-x64
7Analysis
- max time kernel
149s - max time network
188s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 10:51
Static task
static1
Behavioral task
behavioral1
Sample
PDF-XChange Pro 11.0.1 (x64).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PDF-XChange Pro 11.0.1 (x64).zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/enhanced/PXCEditorCore.x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/golden/PXCEditorCore.x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/x64/pdfSaver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/x64/pdfSaverL.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/x86/HtmlToPdf2App.x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/x86/pdfSaver.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
PDF-XChange Pro 11.0.1 (x64)/Crack/x86/pdfSaverL.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PDF-XChange Pro 11.0.1 (x64)/Setup/ProV11.x64.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PDF-XChange Pro 11.0.1 (x64)/Setup/ProV11.x64.msi
Resource
win11ltsc2024-20260709-en
General
- Target PDF-XChange Pro 11.0.1 (x64)/Crack/x86/HtmlToPdf2App.x86.exe
- Size 37.0MB
- Sample260730-mx4tmagb59
- SHA256 9aae8645978c560927fcd3acdeb80498068a0994fce9ad963d6f3412a8726e58
- MD5 dffd852d89e7d146cf7c8e6690b37fd4
- SHA1 22368aaddcda9a4c02a24a49b30339c38581d4e3
- SHA512 896ede8df4167835faf422010f47cf2a05cae279fe88b1a3c174545775b08f70210a6ad4141f7fdbe854886fbda7c0061fa11177d85b3d2da1699f86e96588a3
- SSDEEP 393216:S7kZ6cETe0pXxhsLUxvdfLDXxxBn7xC54zENh7dG9kg4:S7XeihmUx1fRxuycldG9F4
- TLSH T14687BE80F68280F5C98A11B1943AF73FA7386F1547B489C7E2E43DF6AD326D23A35546
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language HtmlToPdf2App.x86.exe