Overview

overview

8

Static

static

3

Gta6.exe

windows11-21h2-x64

8

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDIR/app-64.7z

windows11-21h2-x64

1

resources/...tar.gz

windows11-21h2-x64

1

resources/...e3.gyp

windows11-21h2-x64

3

resources/...ing.js

windows11-21h2-x64

3

resources/...te3.js

windows11-21h2-x64

3

resources/...ace.js

windows11-21h2-x64

3

resources/...e.json

windows11-21h2-x64

3

resources/...sync.h

windows11-21h2-x64

3

resources/...kup.js

windows11-21h2-x64

3

resources/...base.h

windows11-21h2-x64

3

resources/...lude.h

windows11-21h2-x64

3

resources/...cros.h

windows11-21h2-x64

3

resources/...ment.h

windows11-21h2-x64

3

resources/...ding.h

windows11-21h2-x64

3

resources/elevate.exe

windows11-21h2-x64

3

snapshot_blob.bin

windows11-21h2-x64

3

v8_context...ot.bin

windows11-21h2-x64

3

vk_swiftshader.dll

windows11-21h2-x64

1

vk_swiftsh...d.json

windows11-21h2-x64

3

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...xx.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Analysis

  • max time kernel
    898s
  • max time network
    448s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 22:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    resources/app.asar.unpacked/node_modules/sqlite3/deps/sqlite-autoconf-3440200.tar.gz
  • Size 3.1MB
  • Sample260602-2mgcxaex2z
  • SHA256 1c6719a148bc41cf0f2bbbe3926d7ce3f5ca09d878f1246fcc20767b175bb407
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite-autoconf-3440200.tar.gz"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:760

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads