af2e123149406ad33eb758ef5814861fba5e1a6badb73405cca4084c6be46b7f

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 20:01

Target
$PLUGINSDIR/app-64.7z
Size 118.6MB
Sample260711-yrpy3act21
SHA256 af2e123149406ad33eb758ef5814861fba5e1a6badb73405cca4084c6be46b7f
MD5 02f5e44063d0f2ba5314dcb91d2a810c
SHA1 d8cb3a38f086e41fbc93768c55b740ef40fcb335
SHA512 5c9c24202eec9d029acf5d0730e9a142d2cf3a8cb730641ad18ec432d3b1625da55c874191eae4305b5380742e2372ca3023a9535faea06ce0dbb167aafe0e2b
SSDEEP 3145728:bASOwsQGUoIO27HEUq3pjhsjBpdJxew6NjH4xM:HOCoF272ZjUdJOY+
TLSH
T12B5833F32404781BE37766BF73467375698DAB700E05F217ED9A8C027B6A632FA50849
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4556	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4556	7zFM.exe
Token: 35	4556	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4556	7zFM.exe