5d37e5e7ce01549965bf2166adcba33d1e2c4bd2c90711032f3987b58452ce49

Login
Reports

Overview

overview

Static

static

Pumpkhn_Un...1).exe

windows10-2004-x64

Pumpkhn_Un...1).exe

windows11-ltsc_2024-x64

Pumpkhn_Un...ep.exe

windows10-2004-x64

Pumpkhn_Un...ep.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...IN.exe

windows10-2004-x64

Pumpkhn_Un...IN.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...64.exe

windows10-2004-x64

Pumpkhn_Un...64.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...16.exe

windows10-2004-x64

Pumpkhn_Un...16.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...IT.exe

windows10-2004-x64

Pumpkhn_Un...IT.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...LL.dll

windows10-2004-x64

Pumpkhn_Un...LL.dll

windows11-ltsc_2024-x64

Pumpkhn_Un...YS.sys

windows10-2004-x64

Pumpkhn_Un...YS.sys

windows11-ltsc_2024-x64

Pumpkhn_Un...64.sys

windows10-2004-x64

Pumpkhn_Un...64.sys

windows11-ltsc_2024-x64

Pumpkhn_Un...64.sys

windows10-2004-x64

Pumpkhn_Un...64.sys

windows11-ltsc_2024-x64

Pumpkhn_Un...H1.exe

windows10-2004-x64

Pumpkhn_Un...H1.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...er.exe

windows10-2004-x64

Pumpkhn_Un...er.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...AC.exe

windows10-2004-x64

Pumpkhn_Un...AC.exe

windows11-ltsc_2024-x64

Pumpkhn_Un...er.bat

windows10-2004-x64

Pumpkhn_Un...er.bat

windows11-ltsc_2024-x64

Analysis

max time kernel
898s
max time network
439s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 12:59

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

themida

Behavioral task

behavioral1

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe

Resource

win10v2004-20260911-en

windows10-2004-x64

28 signatures

900 seconds

defense_evasion discovery execution persistence privilege_escalation themida trojan

Behavioral task

behavioral2

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

24 signatures

900 seconds

defense_evasion discovery execution themida trojan

Behavioral task

behavioral3

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

29 signatures

900 seconds

defense_evasion discovery execution persistence privilege_escalation ransomware trojan

Behavioral task

behavioral4

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

33 signatures

900 seconds

adware defense_evasion discovery execution persistence privilege_escalation ransomware spyware trojan

Behavioral task

behavioral5

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral6

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral7

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral9

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral12

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral13

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral14

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral16

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral17

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral18

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral19

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral20

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral21

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

900 seconds

discovery execution

Behavioral task

behavioral22

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

adware discovery execution persistence ransomware spyware

Behavioral task

behavioral23

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral24

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral25

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

20 signatures

900 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral27

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

900 seconds

discovery execution

Behavioral task

behavioral28

Sample

Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

17 signatures

900 seconds

adware discovery execution persistence ransomware spyware

Report Analysis Logs

General

Target
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe
Size 3.2MB
Sample261102-p77pdatwht
SHA256 5d37e5e7ce01549965bf2166adcba33d1e2c4bd2c90711032f3987b58452ce49
MD5 fbaf6262fd84f9966338518d4de46fdd
SHA1 291d481e3b42029e157e7c60febc8fe67cd50cf1
SHA512 5d8cc6e1ab85fae8d9a5ffa83cecc2608b1fbbb28b9e80afe2dc6f7d46b657d489e03f75e42fc147d49313b3a41ad768fd0f320a905cbc41d767c0fc3c3d9d7e
SSDEEP 49152:VOQ6nNB9ySqeDoVFixOA9DruNebQk9DtTKkuecMC+coEbyxvgg+lV:D6nwNomN1AKku1M2Jfj
TLSH
T1BBF57D5A67B840E4D4A6C278C4068A0BD3F3F8944B339B9F51D947AF1F736A24E2D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

Processes

C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\DMIEDIT.exe
"C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\DMIEDIT.exe"
1⤵
PID:1396

C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\amifldrv64.sys
C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\amifldrv64.sys
1⤵
PID:1108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1108-0-0x0000000000010000-0x0000000000017000-memory.dmp

Download