d9906a38ebab5561a77b1ba24e95c5be7614fac4a0adf3e4f45e33e54dd6967a

Analysis

user interaction
yes
max time kernel
14s
max time network
22s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 12:56

Target
unlock-win.exe
Size 80.4MB
Sample260821-p6mykseq2s
SHA256 d9906a38ebab5561a77b1ba24e95c5be7614fac4a0adf3e4f45e33e54dd6967a
MD5 74670468831240786b681aa5ac8a04f5
SHA1 8e378b8a4c1795fea9459304a5af1d821b352417
SHA512 ed1046fc2f2f5c17e997a68b74eb7d546454116883e61eb82cf2f2b19f536eec8970defba461a6c8b297f50b05bee960a4d954227fe3d445d513f0ab86d16c03
SSDEEP 393216:p958gGwsR0xwep4bURA/cQPGdC0j56va4yVaZEbQmJe6WVCSBMdioHCAMBvGBqwT:358og0xoEA0QedC02WyGjhT
TLSH
T189087C03F2A341D9C06AC1758796A233F631BC0A5B34A6DB768C4B222F76FE05B39755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Users\Admin\AppData\Local\Temp\unlock-win.exe
"C:\Users\Admin\AppData\Local\Temp\unlock-win.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3520