51b23d7bcb1c0d58239fbb110677628807de83b2d58ad1a6b4f6672c745a4c64

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 06:04

Target
TeraCopy.7z
Size 3.9MB
Sample260730-gsx8dsvtex
SHA256 51b23d7bcb1c0d58239fbb110677628807de83b2d58ad1a6b4f6672c745a4c64
MD5 d0ab3e51cebd679a6b3ba417bf48db38
SHA1 afd4532e4edf4e7161a09710568ef363f0276c2a
SHA512 9d5ef056821abd09a0f14b16c560674dc8ab6c85642859909475689503ba466fccdaa253a72c69a8ea9500d47770521470c2af2862d6b3c15fe3b9ddb64b8529
SSDEEP 98304:Sm7s5wwIHneKHkJpND4xgJC5UqIe0156+WO+H4Le4te34LS:BrwGneKHkbND4x6skT6+YABc34+
TLSH
T197163377940FA26468227AF5DDB0A3FA0AA35F37B55D32250FE38C89FF446448151BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2216	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2216	7zFM.exe
2216	7zFM.exe

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2424