Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
Multimedia.Builder.4.9.8.keygen-CORE.rar
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Multimedia.Builder.4.9.8.keygen-CORE.rar
Resource
win11-20260911-en
2 signatures
150 seconds
General
- Target Multimedia.Builder.4.9.8.keygen-CORE.rar
- Size 33.1MB
- Sample260924-2g6qlstdnd
- SHA256 05c18fe7e0f046834920f8e95e4e53295d6791db54fe581dc90e3af415ae6c6a
- MD5 3a8ea47c79479f98ebf22464bbaf5320
- SHA1 0e2d04334abec6c3877f032598c575818f6552a6
- SHA512 dc92506dfab3e1632b930c2bbfee0d3891762c04cd36e87d6fbff0417ce9d7e5eda45deb0a2122fc0ccdeed492439383a464132aaa5c368a3cb5f4c26aaab448
- SSDEEP 786432:nCzfUN3Ph046cvuLMmeXuLVxPIGxN4wRZbawojQlkjmHpD5g:SUN3Phx6c2LleXQzhCjkHpD+
- TLSH T1887733969B01598C2D096C7EBF6DF80B7678DB9AB1035638078FF26A95FB4C5AC04F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4672 7zFM.exe Token: 35 4672 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4672 7zFM.exe