9943cde0564df657ab90274c31c783f878961487931207795b01dfe5eeadfe12

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/07/2026, 04:42

Target
$PLUGINSDIR/app-64.7z
Size 117.1MB
Sample260719-fb3acaex2t
SHA256 9943cde0564df657ab90274c31c783f878961487931207795b01dfe5eeadfe12
MD5 be4b3eeb70b40f671957ca8b6c223557
SHA1 c5bb89387773ba876297dcd78f6b07557c9fa42b
SHA512 36bb597d49b42986908f937e71d5161c27a9f2e99035efecaff09ebb59de0bc1b32ceef32451e9c2948d24cf398d6d936e361c543cda8751294062d5ccf0a885
SSDEEP 3145728:XT+Lg2Xzl1oscJfNfUkddXF98mlCH0wbYXBs1f:D+Lbjo7tNvdz6mbcQs1f
TLSH
T122483333D6ACBB3DC8AD6DBD9A515E94844401EA6664C88EC1FDF79C93FA3406E06C31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1084	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1084	7zFM.exe
Token: 35	1084	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1084	7zFM.exe