home

windows-password-unlocker.exe

Windows Password Unlocker Standard Trial

Password Unlocker Studio.

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.passwordunlocker.com and multiple other hosts.
Publisher:
Password Unlocker Studio.

Product:
Windows Password Unlocker Standard Trial

Description:
Windows Password Unlocker Standard Trial Setup

Version:
7.0

MD5:
9211eac0d2a253e5316e92efbde759b8

SHA-1:
d178348286ceaf6a95d7e3251f363dde06019f23

SHA-256:
d3bc24667bb772e01676c746433e6ac1d2df0f83e29449d6886672eb58fa6d8a

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/18/2024 3:49:13 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
BATCH.Virus
9.0.1.0101

IKARUS anti.virus
not-a-virus:RiskTool.Win32.MBRFix
t3scan.2.2.29

Kaspersky
not-a-virus:RiskTool.Win32.MBRFix
14.0.0.4034

File size:
27.5 MB (28,859,248 bytes)

Product version:
7.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\software\windows-password-unlocker.exe

File PE Metadata
Compilation timestamp:
6/20/1992 8:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:j56VU7MwNpXnVwP/yD2nVn5ZMCJ4T1+5/JQ:l6oMup3cNnV5qC8Y6

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9997

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file windows-password-unlocker.exe has been seen being distributed by the following 10 URLs.

http://www.passwordunlocker.com/.../windows_password_unlocker_trial.exe

http://windows-password-unlocker.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANHJz92xUyXmfoOJ6BMU4k899QsMLahyPEwBRyMIexOtHZnPwW5fpTjucuF3T jhFOtEojOo/WIm8dP9ZZYQyyuU5NPwRaoL/CkLhXrCfLk NFmMhBzddvd5EBVjuBOF8lfqUg/.../Q==

http://passwordunlocker.com/.../windows_password_unlocker_standard_trial.exe

https://docs.google.com/uc?export=download&confirm=IgTu&id=0BycFBKnSS5M5Yms5TS1PTFBFdWM

http://windows-password-unlocker.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANHJz92xUyXmfoOJ6BMU4k899QsMLahyPEwBRyMIexOtHZnPwW5fpTjucuF3T jhFOtEojOo/WIm8dP9ZZYQyyuU5NPwRaoL/CkLhXrCfLk NFmMhBzddvd5EBVjuBOF8lfqUg/.../Q==

https://www.passwordunlocker.com/.../windows_password_unlocker_standard_trial.exe

http://windows-password-unlocker.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtIYd2xGRM0Di29opU4q5mKUWklvtFig64fqkEhDs5GmAkHLRNB9IQjQ 6bN YJD4/BLa0WzBRz0qv4D/DIp/kbPBctC4IcMvVUoRrvoH uCx1 iOjqMBLC5vExLh I2W/.../1SjQLdgqH5aDvAIDAEbI4fwSkJtUAsFPId8UcTfw==

http://windows-password-unlocker.softonic.pl/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOr4H8WGS0ui81ErVUowZ5WCbkjnxG7FtUEkr4Rz4O8FXZnPwW5fpTjucuF3T jhFOtEojOo/WIm8dP9ZZYQyyuU5NPwRaoL/.../A==

http://www.passwordunlocker.com/.../windows_password_unlocker_standard_trial.exe

http://windows-password-unlocker-standard.softonic.jp/download-tracker?th=HTiKf DAbmdLtJKwCPmhPvwPLhnyMcWU2NlH3tOc5xWyVi u0x1x4JnfEGGlgC63GGz92xZ5uILD8 1WUNI2MM2HkIGwLraNUbJODSQzN/.../HeeMubIvS7VgkCwGlrgA==

Scan windows-password-unlocker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.