16a68f7ead085510ff3edc23b3bda3726856692b566d5279b3a0c47e0f105235

Analysis

max time kernel
30s
max time network
30s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 08:51

Target
Debug (4).rar
Size 1.8MB
Sample260905-kr5gvsch75
SHA256 16a68f7ead085510ff3edc23b3bda3726856692b566d5279b3a0c47e0f105235
MD5 840f2d1562c26731ecd3ff6aa93dfad0
SHA1 d9fc32f0e72d7c72bd477c403bc5977e0306e7c7
SHA512 c8ec042e80396f69fa064e3929defc9232481c85a84e31146ebd55ae45140fc88d9b809c51538c72a3eaf9e0ae63d6a2969c805a4955830a63f7de1f03ebeece
SSDEEP 49152:MQZ409AKlW2MgJwegLQCQD3b9k6s2Ku7rR7z:MQL9AKlFweLCQDrs2K6
TLSH
T1C58533133C62F5A9E108890DE9D3B07CB78DB986C1DCA6B4812795A33E373A5B50D673
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4140	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4140	7zFM.exe
Token: 35	4140	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4140	7zFM.exe