3fbfc8b92bd1a038103629a2effaf62b834622cbf0c85099724ed0a83c79a8df

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 05:40

Target
$PLUGINSDIR/app-64.7z
Size 101.3MB
Sample260702-gcvsbsav2n
SHA256 3fbfc8b92bd1a038103629a2effaf62b834622cbf0c85099724ed0a83c79a8df
MD5 4135e4d4ff8644d52a6f834505068060
SHA1 2c5a3246b2a38df2a8a852c0b424e363308b9d8d
SHA512 d81937910561af1314f48c2adf4473d70da42d5e6d2e90625b6521c1e8619108923c1bab264b1c6896ba1d96246da2a16b7a4c55f6dbed698c6c94d363eff890
SSDEEP 3145728:NXL4i8EOxLwJERRgmBpoL9dSsroCmLOKvH0M0B:R4bE8LBcSoJ9ETBwB
TLSH
T1AB3833D7C6FE8B1EE6C422B269C6585255C2EF03DFB8909306ED8C72B54E48C53252F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5444	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5444	7zFM.exe
Token: 35	5444	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5444	7zFM.exe