65b85fd81102ea156da899194bf4c1d426141ec4a8bcbf5726f0decc74ff315f

Analysis

max time kernel
598s
max time network
471s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/10/2026, 15:00

Target
$PLUGINSDIR/app-64.7z
Size 82.6MB
Sample261003-sdqqjs1dlh
SHA256 65b85fd81102ea156da899194bf4c1d426141ec4a8bcbf5726f0decc74ff315f
MD5 f4b24a956f87c55ed7a59240b38f16a0
SHA1 2a4fae8df434311b44388e90a3125d456248c781
SHA512 0f537c941620c2a9c9e3778df2d4e9df3927babfa1b4870847c63e96e6beaeae2335d86c860508734056069b7ed59af62ce464029a53f899644b3fe573638ee1
SSDEEP 1572864:uLdkZFORIFAFm6cl95DIRzmOxOrqu+TON2WTYWgTgQo2iUA+lhGRNx:u2WRI8cl95nOorquGNyYWGvo20RH
TLSH
T1251833ABDB82B7E4D807AB60897F6F38EF91B3C2C17500E6216C6E4EB01949CDC45975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2660	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2660	7zFM.exe
Token: 35	2660	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2660	7zFM.exe