51b23d7bcb1c0d58239fbb110677628807de83b2d58ad1a6b4f6672c745a4c64

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 06:04

Target
TeraCopy.7z
Size 3.9MB
Sample260730-gsx8dsvtex
SHA256 51b23d7bcb1c0d58239fbb110677628807de83b2d58ad1a6b4f6672c745a4c64
MD5 d0ab3e51cebd679a6b3ba417bf48db38
SHA1 afd4532e4edf4e7161a09710568ef363f0276c2a
SHA512 9d5ef056821abd09a0f14b16c560674dc8ab6c85642859909475689503ba466fccdaa253a72c69a8ea9500d47770521470c2af2862d6b3c15fe3b9ddb64b8529
SSDEEP 98304:Sm7s5wwIHneKHkJpND4xgJC5UqIe0156+WO+H4Le4te34LS:BrwGneKHkbND4x6skT6+YABc34+
TLSH
T197163377940FA26468227AF5DDB0A3FA0AA35F37B55D32250FE38C89FF446448151BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5032	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5032	7zFM.exe
Token: 35	5032	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5032	7zFM.exe