bdfac098adddbfed2f574ab6c9adccf5c6dfcc85ae974052f9c447baf0648cb3

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 23:18

Target
FFXIII-2 - Console Button Prompts (v2.1).7z
Size 3.5MB
Sample260620-3ac1dsas9k
SHA256 bdfac098adddbfed2f574ab6c9adccf5c6dfcc85ae974052f9c447baf0648cb3
MD5 168a80d81c1c7b59b8c9a5eeaccf1f91
SHA1 b11bd21cd83306010d2e6bf6925220741ed8b44d
SHA512 e96a326f8e7c709222eea50b1c1a0f294896320f919594c6df1232bcaa81282b64715df2226c30a1bac9489490d01891df67af5425fa3c8037f30a3fe24762fb
SSDEEP 98304:qmvTZRzjOwdGGtVlVn8NXnxzBo+5D0ZA1f0a4sTGPMdAJ3i+ClK:7F1VDMnfo+5gIf0alTGEaDCc
TLSH
T13A0633A36078246BF4D3E63344BE99794D9CDD345BB693202A36160F4C236B88D73A77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2616	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2616	7zFM.exe
Token: 35	2616	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2616	7zFM.exe