edcee4944a48003adaf274ed6dae061496c3c44a3a75184df87fd63e93e223d3

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
HD2CheatMenu_2.6.6.0.rar
Size 1.4MB
Sample260925-k5tbracg79
SHA256 edcee4944a48003adaf274ed6dae061496c3c44a3a75184df87fd63e93e223d3
MD5 2658c08232acb781f57ac6bcc77ec8af
SHA1 d7eeb4d367f5c7d1af9833bcb72ccf9ab3964382
SHA512 95fa7cc8a3fc8eb49d71ad38499a6b4e0d753bcbf93da75d90a45c345950ec49f1ba5b99b2f02669932cc9e8002bf511a1a2a73ad7812315f6dc5db3ec44034c
SSDEEP 24576:ui0BS9b2nfgnBFAe9sWFxqUyCRWuJoYBD+ChcAlGts6+xUWYoXms4fD5V5V:ucbkfgjoqoUjar2GtsFxUZ+JEt
TLSH
T1766502DEE77D1E97F67349D0A66612866B013ABBF5DADA3C020D9B4D7804F308211F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
484	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	484	7zFM.exe
Token: 35	484	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
484	7zFM.exe