72911634e29a59c596190575562d3bf340b62613c7167269c3a517836206f63f

Analysis

max time kernel
150s
max time network
106s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 04:24

Target
$PLUGINSDIR/app-64.7z
Size 77.3MB
Sample260913-e1epxatwds
SHA256 72911634e29a59c596190575562d3bf340b62613c7167269c3a517836206f63f
MD5 5ee23178ee745ccf715a52bc92228ebf
SHA1 7ecbc93e26154088bee3772bb354fbc6d3a1928b
SHA512 5450d953d754c2885dd82957e3dd29c799a007419641969580a12abadadf001e07d0a0cec863f4c4532a8d2014cc1f11624001a6e543a7db4af941030dd3b397
SSDEEP 1572864:Tu/U1RESsuvcO23b1+ga+24UOIOxXZNnuxXHXQj4DupG3ssKH:TqkcF3kgRMANkHXU3Z
TLSH
T1F108336F1183F3668C2E5D30FB11F45DED4657ABC2AC9A3B7717E0AAC4748E909024A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5388	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5388	7zFM.exe
Token: 35	5388	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5388	7zFM.exe