73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 22:25

Target
blue driver.rar
Size 3.3MB
Sample260905-2cd5sstema
SHA256 73cbf3bb6a9c46790011fefb814b16230dc2f0a5b3cd1da97c1e5b8e0562c9db
MD5 76b5d5b89702727283641d45beb60351
SHA1 b8b217e892f415c3580bcceef26ac46ecafa5e6e
SHA512 63a89d813ac844c4e17f721270d9ed49a80386167f5a1aeb884e28c70f551fc302a1046b58b3abadaf0705cc2645f7290c0d71911c541b77e33d9eed0bd8d75b
SSDEEP 49152:nD6vaFhBMoztg1HPt0nOcW2YTcW2Y5cW2YaKSJJUzOFhkszAPFh7rOF6w0zmOqi:nD6NrHPVlTTlT5lToJUeeZsFTGqi
TLSH
T197F5332D2D90840BDFD65B39828EEA943373D295438D82A75241A361F46C737AE3DA1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4364	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4364	7zFM.exe
Token: 35	4364	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4364	7zFM.exe