XyronProTweaker[.]exe

Resubmissions

08/08/2026, 18:01

260808-wlvw1sbm2v

08/08/2026, 17:59

260808-wk8fqasbqf5

Sharing

Copy URL Twitter E-mail

General

Target
XyronProTweaker.exe
Size 11.4MB
Sample260808-wlvw1sbm2v
SHA256 b61c723b0cd83e83689f03dd1170ec93cc8e0df0ace5fd2e7ef4ead506e7f176
MD5 c04a732f6c26367445515b7f83e704f3
SHA1 7870855188a0d544c019b86da70f0b4c916fedef
SHA512 205b7d8258bfeac29c72c082d37210ffcdefda0f4ca73982dac3654e8a71bdd3e9d7b7df49081be7382fd75d121378d79d035a4bd49b3fc899e3b6dc5d60c208
SSDEEP 98304:e1bFccwh7Em6958KrXGfmKH773I+OGER4OsTBWJ7qtPyx16gR5:4Ilyi2G5H773/OGExsTGQPy7X5
TLSH
T139C6B9D81C12887BFE60D3366066573D85EB28458EA21B763EFD267437A134E8C572F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XyronProTweaker.exe

File Explorer

XyronProTweaker.exe

.exe 11.4MB

XyronProTweaker.exe

IMPHASH 2c7574882b59e44f60283bd06864761e
SHA256 b61c723b0cd83e83689f03dd1170ec93cc8e0df0ace5fd2e7ef4ead506e7f176
MD5 c04a732f6c26367445515b7f83e704f3
SHA1 7870855188a0d544c019b86da70f0b4c916fedef
SHA512 205b7d8258bfeac29c72c082d37210ffcdefda0f4ca73982dac3654e8a71bdd3e9d7b7df49081be7382fd75d121378d79d035a4bd49b3fc899e3b6dc5d60c208
SSDEEP 98304:e1bFccwh7Em6958KrXGfmKH773I+OGER4OsTBWJ7qtPyx16gR5:4Ilyi2G5H773/OGExsTGQPy7X5
TLSH
T139C6B9D81C12887BFE60D3366066573D85EB28458EA21B763EFD267437A134E8C572F2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

363248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dxgi

CreateDXGIFactory1

kernel32

QueryPerformanceCounter OpenProcess Sleep GetTempPathA CloseHandle K32EnumProcesses GetModuleFileNameA GetLogicalDrives Process32First VirtualProtect GetCurrentProcess GetDriveTypeA GetSystemTimes MultiByteToWideChar GetProcAddress WaitForSingleObject CreateToolhelp32Snapshot GetCurrentThread Process32Next K32GetModuleBaseNameA SetFileAttributesA GetThreadContext ExitProcess CreateProcessA K32EnumProcessModules GetTickCount IsDebuggerPresent GetComputerNameA GetModuleHandleW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead FreeLibrary QueryPerformanceFrequency LoadLibraryA GlobalUnlock GetModuleHandleA WideCharToMultiByte GlobalLock GlobalFree GetVolumeInformationA SleepConditionVariableSRW GetCurrentThreadId WakeAllConditionVariable GlobalAlloc SetUnhandledExceptionFilter GetEnvironmentVariableA

user32

OpenClipboard CloseClipboard DefWindowProcW DispatchMessageA GetWindowRect DestroyWindow CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow EmptyClipboard GetAsyncKeyState SetWindowLongA GetCursorPos MoveWindow SetLayeredWindowAttributes TranslateMessage LoadIconA PeekMessageA PostQuitMessage FindWindowA UpdateWindow GetKeyState LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetWindowLongA GetForegroundWindow SetCapture SetCursor GetClientRect GetClipboardData SetClipboardData SetCursorPos ReleaseCapture IsWindowUnicode

advapi32

RegOpenKeyExA GetUserNameA RegCloseKey RegQueryValueExA

shell32

ShellExecuteA

ole32

CoInitialize CoCreateInstance

msvcp140

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??Bios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Xbad_alloc@std@@YAXXZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exception@std@@YA_NXZ _Cnd_do_broadcast_at_thread_exit _Query_perf_counter _Thrd_detach ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?good@ios_base@std@@QEBA_NXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

wininet

HttpOpenRequestA InternetReadFile InternetConnectA HttpSendRequestA InternetCloseHandle InternetOpenA

iphlpapi

IcmpCloseHandle IcmpCreateFile IcmpSendEcho

ws2_32

inet_addr

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __C_specific_handler __current_exception_context __std_exception_copy __current_exception memset memmove memcpy memcmp strstr __std_terminate __std_exception_destroy memchr

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers _fseeki64 fsetpos _set_fmode fgetc ungetc setvbuf fgetpos __p__commode fflush fclose fputc __acrt_iob_func fopen fseek ftell __stdio_common_vsscanf fread __stdio_common_vsprintf _wfopen __stdio_common_vfprintf fwrite

api-ms-win-crt-utility-l1-1-0

rand qsort

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_wassert _beginthreadex exit terminate _register_thread_local_exe_atexit_callback _c_exit __p___argv _exit _initterm_e _initterm _get_initial_narrow_environment _set_app_type _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe __p___argc

api-ms-win-crt-string-l1-1-0

_stricmp _strdup strncpy strcmp strlen strncmp

api-ms-win-crt-filesystem-l1-1-0

_lock_file _mkdir remove _unlock_file _chdir

api-ms-win-crt-math-l1-1-0

roundf sinf sqrtf __setusermatherr cosf logf acosf fmodf powf ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale