1c3bde15596e3103acdfdb3abe2bea1f7726f360b57c58e0ab103c7c0e06c636

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 16:31

Target
$PLUGINSDIR/app-64.7z
Size 65.8MB
Sample260922-t1ga3aad99
SHA256 1c3bde15596e3103acdfdb3abe2bea1f7726f360b57c58e0ab103c7c0e06c636
MD5 4f8c104f6c62816f7f2985133c306c15
SHA1 da028ab163b70a4a60fbb6defa6a79a0e38953d3
SHA512 52b82d94f389d5e0948f811a86fe3426bd5a2561299d01a2cbbb519fb6b37784c8037f823925cf924945cf02b2f971c775f170b878a8f084f4a1212c0c33f104
SSDEEP 1572864:84gPXMo5xrX6zWBMby7rYjemXIdoddqdpCoJFsGLdhNkdG9czNIKD:84AcSIWBMbMr1m4doKrCRYjNkG9WIKD
TLSH
T192E7331412041E2AC544D1EA45EC1A6BF21ADFA4BF9E387D7A2D39BC19AC73E3850CF5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
884	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	884	7zFM.exe
Token: 35	884	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
884	7zFM.exe