acfa56d5c106eb6a57aa9d42fa175a7b53a379210d126e2e9b0fda6f5d8e3499

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 12:56

Target
starlight_proto_package_v2.5.0.tar
Size 1.4MB
Sample261020-p6ebfabf85
SHA256 acfa56d5c106eb6a57aa9d42fa175a7b53a379210d126e2e9b0fda6f5d8e3499
MD5 9fe46c4dd00be3c661104b0d1518f634
SHA1 b1e39ca251215123d9d78ce23e0d8fb45806f003
SHA512 1aabeea4f37e77a2d07369fb84c087fe66fabb5dd6c25b3f4795482e58db210bf542bedc66a6795762cb48e02bac6bcf041249d7d5b0aa2834b6a139d2914ab7
SSDEEP 12288:Q09PnAvcMwgRYclW7Q9ysQPB22Fpn24J4s4ssuD7NSB+FN3Yk:Q8OcMwgV67PPpVJ2MUBcY
TLSH
T141659E9DD71CAC5BCB45A1315BFE41A2B334A14746813E267D9C506C8F9AB2CCCF788A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5944	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5944	7zFM.exe
Token: 35	5944	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5944	7zFM.exe