f6a6bada54ddce2bc211976e7dfe05c89f4780eab1b992b409dacc7c9b8755b7

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03/01/2025, 16:49

Target

Release-x64.zip
Size

38.9MB
MD5

36f9005784b19cc8f7448390e997a2c1
SHA1

140fefa1d80a828795c03f52ad28002b5d9635d2
SHA256

f6a6bada54ddce2bc211976e7dfe05c89f4780eab1b992b409dacc7c9b8755b7
SHA512

131d1cbb777c1e428b26b870a9f5626f3ed76c97fb9ef9cfb22fb8204da510336e065e71c18a47b3cc31495082ffcab7a37be88a4922dd2956bb73ef1eb6d76c
SSDEEP

786432:v7mya0tlAZkF2k3ya5OzccWkjzuWUKorpBsdDdtd3vA5BsdDdtd3vAD5:zojZ62u56cceWUvpBsDbo5BsDbo1

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2452	7zFM.exe
Token: 35	2452	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Release-x64.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2452