643638883dd96df5ba6d5f6f7605d67dbaaf6747e8b53d42ab48267804b46038

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/05/2026, 10:18

Target
$PLUGINSDIR/app-64.7z
Size 73.4MB
Sample260531-mcflasew2z
SHA256 643638883dd96df5ba6d5f6f7605d67dbaaf6747e8b53d42ab48267804b46038
MD5 191813ae4459a12c5eb6eb585f687041
SHA1 43fa5ea0e62c1b469a75dcabe5d037cf8d1e1836
SHA512 13bfa38392a3920f7a5f5face90fc8d2e1c9ad16e5ea7108cefb6044b85a6fdbcfaf369aede4cf97db95b55b825e9c4341f612fa6599bc8be47a4ec445270428
SSDEEP 1572864:Nt9IKPg7yH6RWYcgpTo/TB7f7RjEMZRhC0VhqkzKwSsQO+MU:NUKQyH6RWvz/TB7fV1ZRo0VIncU
TLSH
T1BBF73384847AFE29E92F05DF0B023BB1E394DB5AAE01205F8E5C9F58771458950BCA7F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
756	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	756	7zFM.exe
Token: 35	756	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
756	7zFM.exe