92bc583bb702fac50a49d59752ec897a445b541089d7fabbf352bc44dac2fc1b

Analysis

max time kernel
150s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 18:23

Target
citra-windows-msvc-20240303-0ff3440.7z
Size 20.5MB
Sample260814-w1f2eayeqf
SHA256 92bc583bb702fac50a49d59752ec897a445b541089d7fabbf352bc44dac2fc1b
MD5 d4338f5063f413e1ee0536271173f735
SHA1 3f267ebbe2f1ee2a8bba141e532b6635391e9227
SHA512 ff6d09ebc82adfac034ba721dcbfd50a4a9e95e3665ea65e834b95d88710d5c50327c381950702ffab65a2026664f4e7636ac36c279073969c677ea93941ccea
SSDEEP 393216:WwNDdcLuyHEbB3uvBlhOBAYq/Vbtwz15tJzOnBbjs2Aby0KnSueo:WwHJyHEbFaBeAYMQPzOnBs2I3KSuJ
TLSH
T1072733A9F679F804B2D122A5DAEFEF8DDFD56BAA010688B41F34076C9647DC74F02901
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5880	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5880	7zFM.exe
Token: 35	5880	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5880	7zFM.exe