ce4461de974f041435660751b382f987fece831028a8c98572d668eda2eee96d

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:34

Target
Oracle_VirtualBox_Extension_Pack-7.2.14.gz
Size 19.1MB
Sample260818-prvpwasdnb
SHA256 ce4461de974f041435660751b382f987fece831028a8c98572d668eda2eee96d
MD5 28b8819ead3327b94733ec78063830e8
SHA1 4e552fd72fa6786a3d208a2c7695a5ede5f11486
SHA512 5f8aea7cda208681437ece898ec1784ab222895660e0366f9ec7fba39fbc2060350282a520302d89953f74bcf07600c1b80cc6633dcc7b5f85b72e9e050fe631
SSDEEP 393216:WSEo+vjoPBYoTenfL5cwijy6k3Vq8z20lcx9UiMhsRylarwDfE:dAjeYoTenTBijrk31z2ScARWYSaE
TLSH
T16217332C8EA832B19CB42BB5D68BFA51344FFCE7857445D12E01A8D4C248DDA745CEAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2324	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2324	7zFM.exe
Token: 35	2324	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2324	7zFM.exe