2ab05126249ae2730d8cd95cc796c58a92453d0291823315ec459e1e633503d6

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:28

Target
Lot 2_PD114.rar
Size 1.7MB
Sample260810-lfc4xafc22
SHA256 2ab05126249ae2730d8cd95cc796c58a92453d0291823315ec459e1e633503d6
MD5 ca5b1decc062a235f92e9384699dc2ce
SHA1 927b6046849cfbde5a5296ed4680f6d8e7d97a90
SHA512 afcd09c8a8001e5c822887070a826faf9a2ab1eaa1c193b770a5f4978766801aec6e9a1a9891ce8fa02a61ea112bcb540856e89a01553b320b62b8f66d309a49
SSDEEP 49152:8WY1fu+qIFE8JpMtIGl2u7c9RESNj5pAmrBLG64Wo:8BuWXWIi2uo9vNjbbFMWo
TLSH
T1658533A5C836B589853D49E4F218EE96A7016B64CFD2FC31BA33AA884F7E7720415F44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2916	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2916	7zFM.exe
Token: 35	2916	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2916	7zFM.exe