2b6e0a0c17da7f5921f4faf01cee6ad98a773281c5506e3dc8bf52010389d5ba

Analysis

max time kernel
299s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 04:27

Target
$PLUGINSDIR/app-64.7z
Size 82.7MB
Sample260828-e3kc6ssydt
SHA256 2b6e0a0c17da7f5921f4faf01cee6ad98a773281c5506e3dc8bf52010389d5ba
MD5 016ccc5aec1cff5fdff786b3d2779295
SHA1 66dc03db2680d4d6dfb40632299cbe5f5e139527
SHA512 013dd3bf9bc79e04fd434bf8961e0ab523448e74d836308ab35e886da8973da1c32bc89cf896cbcf53e5eed317ef8a6c5cf7c482a58ff763a4077ab37f9fed58
SSDEEP 1572864:SCfKtdj3eUar+Q0YRf+6sYr3ab5sCiprLUoQalsjvYmxEU7xaH9/bK:SCfKfzeUazDd2YWsnNgoQalijm/G
TLSH
T1791833F591F3C692A07FE67E6A50E2B84DAAE87C92D4D067002A0750F12E54E74DF84F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3304	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3304	7zFM.exe
Token: 35	3304	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3304	7zFM.exe