c690f3a1ea865837ea46da903cd10bb125b9523d064acd343d200fd83fe08adc

Analysis

max time kernel
150s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 00:52

Target
FC26_NOTACRACK_v1.0.136.57334_Showcase.7z
Size 360.5MB
Sample260709-a79reabs3p
SHA256 c690f3a1ea865837ea46da903cd10bb125b9523d064acd343d200fd83fe08adc
MD5 e61640ed47d94eb765725d3fd181e690
SHA1 a65824d2cb7dce56bc890362db53b158c73f9508
SHA512 3817b963415b2520339ad0bd87f15500ce6edb6e9ec1d3cb6292764064fdd75267daa1d8656794f83c292ed6290e9dff024134951095b7a368223cb3f6abcb59
SSDEEP 6291456:fvz+Xfzak96D0VjO4JB/g27IAdxxrd/9mu+UA5gvRgJAXObHrSpTuX7Mt6I3lJCm:ka6nLJBZpTxrdVmuMoRQtSxurMz5/l
TLSH
T15209339CA2F6938938EBE8631762931708B9D3A94D4DB9132ED7343C35DE51EE82C513
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6136	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	6136	7zFM.exe
Token: 35	6136	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6136	7zFM.exe