df022c010236fae06c9c76ef5cda6fbf8c56af2efad3b98d34379f436389760c

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 04:38

Target
$PLUGINSDIR/app-64.7z
Size 123.5MB
Sample260802-e9tkesdk61
SHA256 df022c010236fae06c9c76ef5cda6fbf8c56af2efad3b98d34379f436389760c
MD5 7a8f3749879183689dbc7df30a173ecd
SHA1 6396b5bf701b6a27e270d1204cd8a48381a92af3
SHA512 41963621b5e9022979c4367046d92a26d1299e1ced5a2416e549f9d1e60bf484eb4b91667a43526a132e9a9a37f02fad54bb2264f3ff7a7d2e724e38de07f408
SSDEEP 3145728:nwiNDcvK0qcpu0nduVn1c/4SCKgmYUaFy1/C4osiyjThS7lYhgF1x1pq:wi9vKdKaPHgmYUaFy1/HbishSWhcX+
TLSH
T1645833420FED6A6FD950C2B9E187A53582713137246CD28FE3CE109DFDD6698CE2226D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
892	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	892	7zFM.exe
Token: 35	892	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
892	7zFM.exe