73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 22:25

Target
blue driver.rar
Size 3.3MB
Sample260905-2cd5sstema
SHA256 73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db
MD5 76b5d5b89702727283641d45beb60351
SHA1 b8b217e892f415c3580bcceef26ac46ecafa5e6e
SHA512 63a89d813ac844c4e17f721270d9ed49a80386167f5a1aeb884e28c70f551fc302a1046b58b3abadaf0705cc2645f7290c0d71911c541b77e33d9eed0bd8d75b
SSDEEP 49152:nD6vaFhBMoztg1HPt0nOcW2YTcW2Y5cW2YaKSJJUzOFhkszAPFh7rOF6w0zmOqi:nD6NrHPVlTTlT5lToJUeeZsFTGqi
TLSH
T197F5332D2D90840BDFD65B39828EEA943373D295438D82A75241A361F46C737AE3DA1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4620	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4620	7zFM.exe
Token: 35	4620	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4620	7zFM.exe