3ae70abdb7a913a18b484307b9d43708df799e2be252d12a07e1170a722e7855

Analysis

max time kernel
298s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 07:51

Target
GitAppLaunch_Latest.rar
Size 43.4MB
Sample260806-jqb89afr21
SHA256 3ae70abdb7a913a18b484307b9d43708df799e2be252d12a07e1170a722e7855
MD5 bc972dd5bec4902d16a24923b7d2f638
SHA1 99875f747b889c30c9e7fcc30b0af6084d075c6b
SHA512 409eb2e9e5b4d3decc0a899b8b9332bad1d3edd1b7544f38a2632a869f43a6391788f6d41d53a0683884caa9e5d3266adeaff2d2b231310a08bed2e6583744dc
SSDEEP 786432:zHl9y0qz6fCXqDqxG4BJPSX5dUqdoVHzHh5XcnBYM2Mssb320G5b68fHiK4Nyhfk:zFA0g6jDiY5Li95Mn32R+9Cil4k
TLSH
T1F4A73335F45E5D71C8E95E611A2F1FBAE6C087B1D4B8D052E22538B9C32C38F21AD8B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1960	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1960	7zFM.exe
Token: 35	1960	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1960	7zFM.exe