b830de5ecab5c4a4021f0d3ea9a8927d1ea3ea43dffa7271fb1082bdce5b66af

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 14:36

Target
ArgoCheatosu!FREEv2.3.rar
Size 2.3MB
Sample261002-ry1ktacb93
SHA256 b830de5ecab5c4a4021f0d3ea9a8927d1ea3ea43dffa7271fb1082bdce5b66af
MD5 6edc48d3afb561c8989bbbba363ae6c8
SHA1 88aea0ad37bb87548f1d63265881bd01f41ec4c5
SHA512 870e14ed2d6e3f3e8891d4d7b6b94c4cf6336c961dc0c2a2a41f5f9880b3261ee15496cceb1fa1e9d20ac14a4ae7219a01b5c4cb5ff6ba80c5fb80e6d521fdfe
SSDEEP 49152:9zJ9J1ud2J2FeY36arjZd+KYwh/FhHGSM/qafbsvGIU4LkxV5f5fyWnBpEJsVy9M:o2Je60//HGV34hUmaf5f9UeaM
TLSH
T102B53334CE76231624161791480F66C08617DCADF0EFACE07DA9954E370E2E69DBE86F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6112	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	6112	7zFM.exe
Token: 35	6112	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6112	7zFM.exe