4c324c48163377fbbb99321811dd364e3bc5221e52c6918c64173c466c02bac6

Analysis

max time kernel
60s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 22:28

Target
$PLUGINSDIR/app-64.7z
Size 79.4MB
Sample260930-2dy7cs1wes
SHA256 4c324c48163377fbbb99321811dd364e3bc5221e52c6918c64173c466c02bac6
MD5 2c70f104ad4f50efb407e7fe1bcfbcb5
SHA1 5cd5504084a0ec758098e9ddbd738210bf214e59
SHA512 f68ba8ed440755848b0e37b39363eb370f3f22064d4ec352d0a5fbdcffb318b6b6c07f6856e6e2185245e7755eb58595dc62fe81f7376c1ce49eabcb502d51e3
SSDEEP 1572864:Qt9IKPO4TaRWYnIQ9yQ0qv+sjJmXMDo5tfM6W1AOzXcDwk3Tv3AnS/:QUK7+RWW3v+yl8PMR1ASIvp/
TLSH
T17508332A041AC2F5DB1EF0782C53F152F74C51A7E5450C6BA7063E697EA36C825BCA37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3004	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3004	7zFM.exe
Token: 35	3004	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3004	7zFM.exe