01a59c3b95fae20abe2ad7b39b60bde2d66dcdc7a955b3db2972aa9f33e26b9a

Analysis

max time kernel
298s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 07:58

Target
Yeni WinRAR arşivi.rar
Size 939KB
Sample260820-jvbhhssdra
SHA256 01a59c3b95fae20abe2ad7b39b60bde2d66dcdc7a955b3db2972aa9f33e26b9a
MD5 ae7e2119857db64515939cd7f98c9322
SHA1 0dfbc89b9c54301fa92d96f985b64e3159e39ba0
SHA512 2af779d1d5cad441ef7a500fb0aa99b55897ba7e383e78b9747753c0f52df6438789a107ae0c32d6d5c5f7618fee16593453a9fa4356a8b095b21318ce4cb08e
SSDEEP 24576:qCq+7OUgLbPTeUYBhM329Th0nK7yQxxoGGdi:qC7PIrtYC+Z7GU
TLSH
T1EE2523C690B0E9CB709577A1691DA4DD9EB5F1383F74A69FB1F088CD6A04C2230BD2D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1132	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1132	7zFM.exe
Token: 35	1132	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1132	7zFM.exe