3793ef0e63b8b73df09a461f7a108ac526889fbcaf9eb836d2560a9588b42d1a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 12:14

Target
$PLUGINSDIR/app-64.7z
Size 75.6MB
Sample261018-pecnjayyet
SHA256 3793ef0e63b8b73df09a461f7a108ac526889fbcaf9eb836d2560a9588b42d1a
MD5 26823e5ce71b7728efabd7742de551ee
SHA1 2abf2ab095a7c8083b7649f948996b60949b56a0
SHA512 ce09987a03354f6fa012a806813e76a7ca4d98f155da5f46a4c1471515a2c2623a0715d69b115e9286d94322e03388ee2a156616eb981624e2a5ca46ad3c241e
SSDEEP 1572864:V2um44Hi/sLzg1nNHG3cv4JW4/KMYAMvJmiftzjPzcsZM2AWUQriXyA:VTm4vU49NYJo+sUifljLcs22/6
TLSH
T12F08338A6F22F03FE412D473E11862E97259E099D7338BA6113F55DEECF26106B841B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4732	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4732	7zFM.exe
Token: 35	4732	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4732	7zFM.exe