c7cf0a77f303eb725d6d8f8abce059f5cd6a33bf253513350e0ad7fb4a34d21d

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:34

Target
Oracle_VirtualBox_Extension_Pack-7.2.14.tar
Size 82.5MB
Sample260818-prvpwasdnb
SHA256 c7cf0a77f303eb725d6d8f8abce059f5cd6a33bf253513350e0ad7fb4a34d21d
MD5 04286348bd32c733ddbca146ba22c353
SHA1 3d7d182e7865665abf70b7c839f4124c919f15ef
SHA512 2ef303a895ffba0f67476b397d2e489c94bb658cfd3354a312667d6ca87e8a0c1695c6b301081f67ff13d5e06360c4640386950228c5421483a0d5246210e83c
SSDEEP 786432:+TMZjGAGG2ncnA0DymGYK/URNcic3cEahX/7r:6tD/UR3c3cEah
TLSH
T1AC188E3BEF2C8C1EC589867E77AB8B712B30F8510572573706D9E2359C962874F0DA4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4496	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4496	7zFM.exe
Token: 35	4496	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4496	7zFM.exe