0bc4ce9d34b8ee1a67fc3a24c7b4b90ddcb59912ba59ee6f24ae9532dc0e8ba9

Analysis

max time kernel
298s
max time network
43s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 10:18

Target
Soundpad_.rar
Size 7.4MB
Sample260728-mcaeaathrh
SHA256 0bc4ce9d34b8ee1a67fc3a24c7b4b90ddcb59912ba59ee6f24ae9532dc0e8ba9
MD5 08fee2ec50dde18417f1b91a904f107a
SHA1 d4c4e7d2382d0c1b4d5166745a163eae01f5c453
SHA512 fae7457d7a449690cc7f5cb155ddca02c88dfad7b7f4471c3835c7d76495ab34fa534f8c3dfd6530f6e865aac7226eb036e8690a5d0c19cb1b3c21334e5b8e72
SSDEEP 196608:pgR95NJznFht1VpDjUTJ4g9FzsqcxvbCtxQZxJyufHd8M6o3Cy/mo:pgR9vJrFhXjDjUTLFzTcxjCtmZyufHqy
TLSH
T12E7633FE4EFFD9E5C67209775CA93C8D656993C06E5F4F0C930819A0382270B686E9E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2944	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2944	7zFM.exe
Token: 35	2944	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2944	7zFM.exe